User Profile

Hi, I created a new enterprise distribution certificate. Can I update an existing provisioning profile with the new certificate for a deployed app? Or, do I need to create a new provisioning profile with the new certificate. I want to make sure that updating the existing provisioning profile with the new certificate won't break an app that is already installed on devices. There is a delay between when I would update the provisioning profile and when the updated app could be deployed. So I want to make sure I'm not breaking the existing installs during that timeframe. Thanks