3.9 is EOL and this stack should be upgraded to 3.11. Cert rotation playbooks were added to 3.11 to address cases in logging where certificates expire.