Yes. i ran in to this recently and i have to reboot the system. it should be enough to restart k3s only but i restarted the whole server. Then you need to update the cluster config on your client to pickup the new certificates.