How to handle inbound https request certificates expiration?

Hi Team ,

I need help about best practices to implement/handle SSL certificates.

I wanted to enable 2 ways SSL/TLS ( don't want to uncheck SSL verification from client side).

I have gone through below post https://blogs.mulesoft.com/dev/mule-dev/working-with-certificates/ but this shows generic way to implement certificate.

My question is :

We generally give reference to certificate within workspace path.

How to handle certificate once this is expired?Can we point this to external location because

suppose we have 500 interfaces and we have given certificate location in workspace then we have to change this to all the 500 places , redeployment and restart will also be required.

Thanks