Answer
Check your current kubectl and Helm versions in main_config.json inside your config folder against what the installer now expects — if they're outdated, download the latest bootstrap files and bootstrap binaries from Build Place, merge them the same way you did during initial installation, set aside your existing ifsroot folder (rename it rather than deleting it) and make the newly-merged one the active configuration location, then copy your existing YAML configuration files (ifscloud-values.yaml, solutionset.yaml) into the new folder before rerunning the SSL certificate update — the underlying tooling mismatch, not the certificate itself, is what's blocking the update.