"If you're running your own servers you should also, at a bare minimum, issue new keys and then get new certs after you update" - Sean Reiser