This message was deleted.

Depends how it is installed If its installed on K8s via helm and it was previously deployed as a custom cert chain it is loaded from a k8s secret called

tls-ca

Once that is updated something like

kubectl rollout restart deployment rancher-server -n cattle-system

(depending on your deployment name etc) will load your changes