Please be aware that the platform cannot generate/refresh the certificate itself, this will need to be actioned by your organization.

Once you have obtained the new/refreshed certificate, navigate to Setup > Admin > SSO Configuration and replace the existing certificate in the Signing Certificate field.