if you don't have a

tier

entry in your certificate it's quite easy to update the csr_attributes and create a new cert