I asked this question on Sec.SE and can rework it to fit on this site if you think the issue is on topic.
There is the security aspect of the question which is good to know where and how windows works, and there is the operations part that applies to changing the OL certificate.
Should I migrate or ask a new question here?