I followed the instructions in the documentation and created a new custom SSL certificate. After deploying it, only a few environments are showing the new certificate. Other environments are still showing the old certificate which will expire.
According to the above article: "Using the ssl object in your LCP.json file creates a single custom SSL certificate that maps to all custom domains used in this environment."