We have so far completed round 1 and 2 of this certificate rotation and are now heading into round 3 to delete the old Root Certificate. This is considered an optional step because it is not time indicative.