What must be done when changing the certificate of our LDAP server?

As long as you switch to a new certificate issued by a public certificate authority, the certificate should already be installed at the Feide login service. See the certificate requirements for more details.