...
The SP metadata file will contain the old certificate and the new certificate string..
You can upload it as it is or you may wish to edit the file and remove the old certificate information. If you edidt in Notepad++ then you can delete rows 1-9
To upload the new SP Metadata please go to SSO>Service Providers on Dualshield Admin Console, edit the entry for Citrix Cloud.
Then Edit Medata
Click Save