This message was deleted.

from what I can tell certs not expired:

Validity
            Not Before: Nov  9 21:55:31 2023 GMT
            Not After : Nov  8 21:55:31 2024 GMT

checked following (on all 3 control plane / etcd nodes):

openssl x509 -text -in /var/lib/rancher/rke2/server/tls/kube-scheduler/kube-scheduler.crt | grep -A 2 Validity

openssl x509 -text -in /var/lib/rancher/rke2/server/tls/kube-controller-manager/kube-controller-manager.crt | grep -A 2 Validity

Rotate all certs for all of servers and restart agent nodes