If You need to update the listing of issuers, you have to do the update while the prevailing certificates are still legitimate. I will use Visible Studio 2017 because I'm employing a Tier one cloud hosted dev VM for D365FO. This tends to be described as a C# Console application https://ahyildir112220191ec568619eaa4d1cdevecom.cloudax.dynamics.com/