What happens when a distribution certificate expires or revoked? My app is already in App Store. Now my distribution certificate is expired. I know my app in App Store will continue running, but my questions are:


If now I have a bug fix in my app, does it mean I am not able to submit the updated app to App Store since my distribution certificate expired?
If I renew the distribution certificate, my understanding is that it is identical as revoke the distribution certificate and create a new distribution certificate, am I right?
If the answer to my 2nd question is "Yes", does it mean in future when I see my distribution certificate is expiring soon, I just revoke it and create a new one for existing app in App Store, am I right?
To answer your questions:


Yes
Yes
Yes


&nbsp;

When revoking a distribution certificate the below scenarios will occur for your users:


When you revoke a certificate that means that any app that is not deployed onto a device (not hosted by AppStore) will no longer be valid. Existing users can continue to use the app. 
When you revoke a certificate and your App is being hosted on the AppStore; users that have already installed the app will not be affected. New users that go to install the app will not be affected. 
When you revoke a certificate and your App is being hosted in-house (internally) and users download it via OTA; users that have already installed the app will not be affected. New users that go to install the app will not be able to install it. Please note this is based off of behavior we have experienced from Apple. 
Revoking a certificate will not affect the ability to update existing apps regardless of whether they are AppStore or in-house apps.


Please note that this has been the behavior observed from working with Apple recently and if any updates were made on Apple's end than this is subject to change.