Planning to change primary domain SSL involved, needbest practice or process that won't break anything

hi there, maybe this is relevant?