Swapped out my certificates for the next year this afternoon. I had cross checked the cert element file names profusely to the configuration files and only one of those had changed. So I did a global move on both servers then rebooted both the web and mail with everything loading securely at the finish.
I tell you these little maintenance tasks are rather schizophrenogenic in that if you go past the deadline you end up with a lot of dead in the water public access services and it's FAR easier just to go ahead and take care of it a week or two in advance ...
Just to be sure.
So now there is nothing to do besides anxiously await the next year when I get to do it all again !