I’ll be honest, I’m the wrong person to ask when it comes to messing with SSL Certificates. I always buy 3+ year certificates because it takes me so long to install. It’s one of those tasks that I do so rarely that I have to reread the supplier instructions 10 times before I’m get it 
If no one else jumps in, you might want to try over at https://serverfault.com/