Copy the contents of the new x509 certificate from your identity provider
As formatted and shown in the screenshot below, paste the contents of the x509 certificate into the Configure > Access > SSO Identity Providers > Your IdP settings page in Carousel Cloud
After pasting the new certificate data and hitting Save, immediately log out and log in using your SSO method to make sure it is working as expected with the new certificate