IPA/LDAP server which has an expired certificate that does not allow us to update the cert nor add clients (servers). We build a new IPA Version 4 server and want to migrate the IPA 3 to the new one

IPA/LDAP server which has an expired certificate that does not allow us to update the cert nor add clients (servers). We build a new IPA Version 4 server and want to migrate the IPA 3 to the new one pa: ERROR: Kerberos error: ('Unspecified GSS failure. Minor code may provide more information', 851968)/('KDC returned error string: PROCESS_TGS', -1765328324) (SSL_ERROR_BAD_CERT_DOMAIN) Unable to communicate securely with peer: requested domain name does not match the server's certificate.