you probably have a higher chance of answers in the openvox slack/IRC (https://voxpupuli.org/connect/). short version is: you can extend the CA if you still have the private key