Wrong CA certificate with new install

The support article was not completely up to date. You should find the relevant information here, in the SAML SSO section: Renewing the SSL certificates