Certificate could not be updated as it is already used by HTTP Based Policy

Question

One of my certificates expired that's in use in several places. 
 When I go to edit the certificate and upload the new, it fails with the following error at the top center of the screen: 
 Certificate could not be updated as it is already used by HTTP Based Policy 
 I can create a wholly new certificate, but that means updating a bunch of rules. 
 Is it not possible to replace an existing expired certificate?

Trond Aarskog · Accepted Answer

Unfortunately the answer seems to be no. Crossing fingers that the team at Sophos soon realize what a terrible design this is. 
 
 My workaround for this has been to use the API to perform the following steps: 
 
 Install a new certificate 
 For each object type where a certificate may be used:
 
 get current settings (which is based on XML) 
 modify XML so it refers to the new certificate 
 post new settings

Delete old certificate

-Trond