That was probably the cause. When netmaker starts up, it only creates new certs if they are missing or near expiration.