What is the recommended approach to renew a Federation signing certificate that is about to expire?