That's correct, typically you cannot extend the expiration date of a Service Account (JWT) public certificate and private key pair. The standard approach is to generate a new pair and replace the old one before it expires to ensure uninterrupted service. Reagrds,Veera Tech.