Sharepoint 2016 certificat expiration

Hello,

We are running a SharePoint 2016 farm composed of:

• 2 Database Servers
• 1 App Server
• 1 Search Server
• 1 Web Front-End Server
• 1 Office Online Server

After checking the environment, I noticed that only the Web Front-End server is using the certificate that will expire in June.

The App Server is using an old expired certificate, the Search Server is configured only with HTTP, and the Office Online Server is using a different certificate.

Is there any documented procedure describing the steps required to renew the expired certificates in a SharePoint 2016 farm and on which server we should install the new certificat ?

We are using Microsoft CA for certificate management.