Proper dating of certificate
Regarding the provisioning profile, don't worry about it before expiration, just keep using it. The peace of mind is that nothing will happen to your live app in the store. I revoked a certificate used for enterprise distribution and was NOT given an option to renew the certificate. App was down (not installable) until I rebuilt it with the new cert. Your in-house apps won't work after a reboot/3days, unless you can update all your apps in that time period.Apple allows you to create 2 in-house apps so it can overlap each other and then you update your new apps with it. Only thing you can revoke is the App-Store Cert without stopping existing apps.Thanks If Xcode detects an issue with a signing identity, it displays an appropriate action in Accounts preferences.If Xcode displays a Create button, the signing identity doesn’t exist in Member Center or on your Mac.You must distribute a new version of your app that is signed with a new certificate.
If you want to renew it before it expires, revoke the current certificate and you will get a button to request a new one.seems to be always disabled, so we have to delete them manually using Keychain (/Applications/Utilities/Keychain Access.app).Filter by ‘login’ Keychains and ‘Certificates’ Category.If Xcode displays a Reset button, the signing identity is not usable on your Mac—for example, it is missing the private key.If you click the Reset button, Xcode revokes and requests the corresponding certificate.