Sam_T the steps to renew an Exchange certificate are described here: Renew an Exchange Server certificate | Microsoft Docs . The issue which is fixed with the latest CU has only affected the certificates created during the initial Exchange installation.
The New-ExchangeCertificate cmdlet automatically generates certificates using SHA-256. You can also use the Exchange HealthChecker (https://aka.ms/ExchangeHealthChecker) to check the hash algorithm.
EDIT:
If you create a new auth certificate, make sure to configure it as next certificate via Set-AuthConfig (Set-AuthConfig (ExchangePowerShell) | Microsoft Docs) or follow these steps if it has already expired: https://aka.ms/HC-OAuthExpired