Searching for detailed guide for Certification Authority change on on-premise cluster

Hello everyone,
I necessarily need to change the CA of my K8S cluster since the admin.conf file has been leaked. I tried renewing the certificates, but I can still access with the old ones. I’m looking online and in the official documentation, but I can’t find a detailed guide on how to create a new certification authority and change all the certificates used by the cluster. The cluster is not a production environment, so it can handle some downtime. Does anyone know how to help me?

Cluster information:

Kubernetes version: 1.26
Cloud being used: bare-metal
Installation method: kubeadm
Host OS: ubuntu
CNI and version: quay.io/tigera/operator:v1.29.0
CRI and version: containerd containerd.io 1.6.12