If I run

openssl s_client -connect localhost:443 | openssl x509 -noout -dates

on one of the rancher MCM host, I still see the expired certs. The updated cert is showing correctly on the web browser and I can use kubectl perfectly fine on the rancher cluster so I feel like I'm missing a step. Could someone point to me what steps I may have missed? I've followed this documentation: https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/resources/update-rancher-certificate