How to make domains to use new default certificate if the old one is expired?

Question

New certificate was uploaded to Tools & Settings > SSL/TLS certificates instead of expired one. How to make domains to use new certificate instead of the old one?

Answer

1. Log into server via SSH.
2. Execute below command. New and old certificates must be displayed:
   

   # plesk bin certificate --list -admin
   CSR Priv Cert CA Name Used
   N Y Y N NEWcertificate 0
   N Y Y N OLDcertificate 2

3.  Select the private key of the new certificate and put it in a file:

   # plesk db -Ne "select pvt_key from certificates where name = 'NEWcertificate'" > cert

4. Put the md5 hash of this private key to another file:

   # plesk php -r 'echo urldecode(trim(file_get_contents("cert")));' | md5sum > sum

5. Assign new certificate to all domains that use old one:

   # for i in `plesk db -Ne "select d.name from domains d join hosting h on d.id=h.dom_id join certificates c on c.id=h.certificate_id where c.name='OLDcertificate'"`; do plesk bin domain -u $i -certificate-ref $(awk '{print $1}' sum); done

6. Remove cert and sum:

   # rm cert sum