I have an old HP #Laserjet printer, so old that it passed the 10 year mark of its embedded TLS certificate on January 1st 2026. And #cups refused to connect to with a "cups-pki-expired" reason and it would then stop the printer.
Thanks to https://blog.whalan.com/2025/solving-cups-pki-expired/ I could figure out a way forward. I could regenerate the certificate on the printer. But then this was not sufficient since cups would then complain that the certificate sent back by the device differed to the certificate it had in its local store. It turns out that this store is /etc/cups/ssl/ and it was easy to identify which file to remove there.
And since the printer is stopped/paused, and we have no practical GUI to unpause it in #GNOME, it was easier to remove the printer and let cups-browsed recreate it.
First new year problem solved !

