求助 k8s v1.13.9 kubelet.crt 证书问题

apiserver 一直在报：
E1202 11:28:33.472590 1 authentication.go:65] Unable to authenticate the request due to an error: [x509: certificate has expired or is not yet valid, x509: certificate has expired or is not yet valid]

执行：for crt in $(find /etc/kubernetes/pki/ -name "*.crt"); do openssl x509 -in $crt -noout -dates; done
/etc/kubernetes/pki/ 下的证书都没过期

执行：openssl x509 -in $(find / -name kubelet.crt) -noout -text |grep ' Not '
/var/lib/kubelet/pki/kubelet.crt 过期了

执行: openssl x509 -in /var/lib/kubelet/pki/kubelet-client-current.pem -noout -text |grep ' Not '
kubelet-client-current.pem 没过期

按照官方文档（最低 v1.16 ) https://v1-16.docs.kubernetes.io/zh/docs/tasks/tls/certificate-rotation/ 这里的方法未能解决，参数不支持

求有空的 k8s 大佬帮忙看看，多谢！