Server Configuration > Post Install Server Security > Secure Sockets Layer > Renewing Signed Server Certificates
  
Renewing Signed Server Certificates
A Certificate Authority (CA) renews a server certificate for you; however, installing it successfully depends on whether the existing certificate is up to date. If you receive an error stating that the CA is not recognized, update the ca_cert.der file in installdir/jre/lib/security with the missing details.