New certificates generated?

Cathy on Slack had this question:

Hi, I’ve been using exp build to generate apks for the Google Play Store. In the past, it has always been signed with the same certificate, but this last time it seems to have been signed with a different certificate. Does exponent occasionally generate new certificates? Do I need to store a certificate identifier in my exp.json file?