View your existing certificate and click on Renew, give it a label (I just use hostname-year as it should be unique) and press Renew at the bottom. This will generate a CSR which you can request to sign by your CA.
Import the signed certificate and assign it again to all your services.
------------------------------
Paul Nicolay
Architect
Cegeka
------------------------------