Can I have checkmk re-build its list of distributed monitoring certificates?

funny you should ask that very question.

we even removed the satellite, and completely rebuilt the satellite (omd rm pdx01, omd create pdx01)

Then added it again, with the new cmkadmin password:

–jason