Is there a way that I can change only that expired certificate in the profile? Or I have to create a completely new profile?
You need to sign again the mdm profile with the new certificate.