Q1: Do we need to order a new cert?
A1: That is up to the customer if they want to order a new cert or use an existent one. In the Digibee Platform it is needed the Full Certificate Authority Chain (ca.crt) in order to configure in one Account inside the customer realm. The certificate must not have a password, otherwise it will not work.
Q2: Are wildcards allowed in the new certificate?
A2: Yes, wildcards are allowed in the certificate.
Q3: What parameters are needed? Bit length?
A3: Key size of 4096 bits and signs the certificate with the SHA256 algorithm.