You should be able to rotate the certificate on the device; this is not a major technical challenge.