https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/

This indicates that kubeadm only gives certs a 1 year lifetime. After that either an upgrade or a manual cert renewal needs to take place