When using custom domains you enter the public and private base64 keys, when the certificate expires/gets renewed, is it as simple as adding new versions to the https-publickey and https-private key in the key vault that gets created during deployment?