How to renew the chain-cert.pem certificate for istio

We are having the chain-cert.pem which is issued by cluster.local which is expiring soon. i would like to know how to renew them which are used in several secrets like

istio-ingressgateway
istio-sidecar-injector