Niklas,
Thanks for that. I forced the update last week so that I could control the process but it seems they don't allow that. Are you saying that after 5 days it will make the new cert primary automatically and that I can't do that with PowerShell before that? The 5 day period is up tomorrow at 11:49. Can I rely on that being the time when it will switch?
We use ADFS for SharePoint so I have to run some PowerShell scripts with the new cert on the SP server. We don't use it for Office 365 since ADFS is set up so that SharePoint can log on SSO via Shibboleth. Office 365 is SSO via Shibboleth too.
Thanks for that clarification.
Bill