I\'m using python-saml for SP SSO. I\'m about to start a key rollover as my certificate is about to expire. I can see that the python-saml library supports "x509certNew