you can force new certs to be generated on the server by deleting the files in /root/certs and restarting netmaker and mq .... you will have to get new certs on all clients as well by doing a netclient pull -n