How to do a key rollover for new certificates

[ERR] Internal error
System.InvalidOperationException: When using X.509 encryption credentials, at least one of the registered certificates must be valid.
To use key rollover, register both the new certificate and the old one in the credentials collection.

Would it be possible for someone to make a Show & Tell on how to correctly proceed with this error?
Because when you do it wrong, you won’t be able to read the previous logs.

The easiest way seems to be requesting a new certificate with the same key, but when this is not possible you will need to make a new one, then it is important to do the key rollover correctly.