Problem with AKS cluster certificates

Good day! We have a kubernetes azure AKS cluster created from rancher 2 years ago. And today our cluster certificates expired. So we update them using this microsoft instruction https://docs.microsoft.com/en-us/azure/aks/certificate-rotation.
But after that we have a problem with rancher connecting to cluster:
This cluster is currently Error ; areas that interact directly with it will not be available until the API is ready.

Cluster health check failed: Failed to communicate with API server: Get “https://our-cluster-name:443/api/v1/namespaces/kube-system?timeout=45s”: x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error” while trying to verify candidate authority certificate “ca”)

So it seems that the problem is with old kubeconfig file for this cluster in Rancher. Is there any way to update kubeconfig file in rancher, or some other way to fix this?
Rancher version 2.5.1 dockerized