If the certificate expired, create a new one from the CA. If the CA expired, create a new CA and certificates. The circle of life. Cheers,Franco