server ssl expired and cant seem to replace it?

Our CWP server SSL expired and we don't seem to be able to update it other than with a self signed ssl by changing the server hostname in CWP

I have googled this to death and most of the guides are way out of date and i cannot see how we can update the ssl for the server itself.

we have a wildcard certificate we want to install, but cant seem to get it to update, there appears to be no ability to update it via the panel for the root server user and replacing the files:

/etc/pki/tls/certs/hostname.bundle
/etc/pki/tls/private/hostname.key

seems to not work either?

how do we get this resolved?