Using leapp to upgrade from Rocky 8.10 to Rocky 9

Here it is:

[root@foreman ~]# openssl x509 -in /etc/pki/katello/puppet/puppet_client.crt -noout -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b8:15:bd:6f:b5:26:dc:d0:bc:c7:d2:1a:17:01:3b:46:ae:c1:ef
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, ST = North Carolina, L = Raleigh, O = Katello, OU = SomeOrgUnit, CN = foreman.fsautomation.com
        Validity
            Not Before: Apr 13 18:27:25 2023 GMT
            Not After : Jan 17 18:27:25 2038 GMT
        Subject: C = US, ST = North Carolina, O = FOREMAN, OU = PUPPET, CN = foreman.fsautomation.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:ba:f3:8b:ea:a9:6d:c1:64:f7:03:a5:1d:43:0d:
                    b6:65:99:c8:86:d2:0b:65:1d:cb:99:8a:4a:9a:fa:
                    64:75:92:3c:3b:85:74:5b:5a:4c:a1:3e:33:7a:ab:
                    dd:61:dd:36:8b:f4:37:de:73:2b:a5:cf:d9:b3:7f:
                    2e:3d:e9:47:f7:52:b2:62:c8:8f:c7:f3:62:ae:e4:
                    c2:d1:00:a9:2a:b1:39:7f:ee:f7:a4:48:08:d2:b3:
                    c6:8b:c4:bd:fe:a7:6c:61:f5:3b:d3:ac:93:65:bc:
                    4e:7b:58:48:67:56:a0:65:77:cd:ab:61:98:b2:10:
                    4f:59:48:aa:a4:69:f3:30:12:eb:fe:b4:c4:f8:fd:
                    c6:63:db:13:0c:7c:8a:cd:b8:25:67:7f:ba:99:9f:
                    78:f9:49:71:9b:f2:c0:95:57:cb:5e:d5:05:1e:3c:
                    ea:ad:61:f2:05:59:0b:91:b8:f6:91:9f:85:44:11:
                    53:91:86:9b:5a:e2:14:3b:84:ec:12:fd:48:31:f8:
                    6a:a9:b0:8a:93:8c:15:14:12:af:80:d4:f7:29:28:
                    a6:14:f5:4f:c6:a5:b7:61:39:a6:79:3b:d9:96:d5:
                    93:91:9e:0d:63:08:34:bc:3c:1e:1d:fa:64:bf:11:
                    d4:4b:33:c4:18:c7:eb:6a:b9:86:de:f4:b9:f7:4d:
                    03:4d:c6:12:87:e3:24:6b:fe:e5:dd:41:1b:ff:86:
                    29:45:7f:df:d8:f5:29:f1:29:cf:b5:6c:6f:fe:a3:
                    0a:43:3d:4d:10:42:ef:66:87:e4:d0:10:15:68:46:
                    3a:fa:b9:98:e2:68:fd:81:f0:23:9e:d9:f9:24:5d:
                    43:b6:b6:61:91:a6:55:c6:21:78:9b:ce:a5:3c:bd:
                    5e:80:31:2d:4a:1d:ba:e4:4e:bb:4f:e1:6f:07:1d:
                    dc:4d:c2:58:1e:5a:04:f3:40:61:99:1b:4c:2d:b2:
                    9b:8d:53:dd:18:f7:23:bc:d5:ea:70:e3:f1:d4:c2:
                    e9:c0:d9:26:47:59:b7:b4:4b:c7:ee:f8:cc:fb:be:
                    02:06:84:3c:67:3a:ea:1f:b5:7e:77:e4:72:3c:6a:
                    cc:d1:7b:00:c9:b3:39:5f:de:3a:7e:18:92:9c:df:
                    d9:3c:19:f7:a3:00:eb:21:35:23:28:03:51:13:8c:
                    08:f0:a1:14:ba:d4:58:bb:96:aa:2b:ff:f9:e0:00:
                    0f:92:a0:9b:4e:25:6e:ce:fc:3b:1c:b2:35:e5:82:
                    64:88:61:90:72:5e:a7:fc:48:95:d7:d9:07:f3:47:
                    ec:0c:fd:59:a9:2c:44:dc:95:d6:7c:47:a6:02:23:
                    13:27:0c:ee:c0:2e:a9:00:cf:cc:4c:a0:c2:b5:3e:
                    43:12:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: 
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            Netscape Cert Type: 
                SSL Client
            Netscape Comment: 
                Katello SSL Tool Generated Certificate
            X509v3 Subject Key Identifier: 
                EC:67:72:D0:48:EE:2E:A7:7C:5D:02:FD:BB:3E:A7:31:72:03:A7:C6
            X509v3 Authority Key Identifier: 
                keyid:09:D2:30:01:E5:75:04:E4:D5:76:A7:EE:EA:65:8D:FA:4F:F5:CE:F0
                DirName:/C=US/ST=North Carolina/L=Raleigh/O=Katello/OU=SomeOrgUnit/CN=foreman.fsautomation.com
                serial:62:B8:15:BD:6F:B5:26:DC:D0:BC:C7:D2:1A:17:01:3B:46:AE:C1:CA
            X509v3 Subject Alternative Name: 
                DNS:foreman.fsautomation.com
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        20:9d:98:16:e8:a1:e0:b4:a6:57:39:b9:a6:ea:3c:78:b1:a4:
        b2:83:86:25:97:ea:d7:b2:29:e9:98:dd:4d:1e:ad:eb:17:48:
        2e:9a:09:72:0a:43:cd:7a:36:2e:26:7b:16:8f:fe:0b:0b:30:
        cf:78:c8:c7:8f:b9:ef:d7:17:89:dd:b3:7d:52:e3:e5:54:58:
        2d:83:38:63:f9:18:91:4e:fe:59:02:4d:3b:f0:1b:99:0e:ce:
        50:fd:0a:28:04:4c:c2:6b:ba:49:57:94:e6:3e:1f:b0:e3:af:
        b1:6c:d2:d4:8c:fe:f4:5b:77:e7:50:df:59:af:d8:a1:08:39:
        65:63:f5:f4:0a:0f:04:12:8e:32:56:5e:57:6b:2b:49:c5:23:
        dd:e2:1f:af:7c:09:f4:7e:09:c5:bd:50:31:05:20:0c:12:9e:
        2f:2e:ee:50:c4:6d:66:83:d8:ef:19:cd:ed:3f:68:9b:11:19:
        19:75:61:07:54:7d:4b:10:8b:3e:16:f7:8f:cd:7e:55:69:eb:
        98:57:6c:66:c5:33:78:19:e2:67:8e:7b:46:7e:d1:12:73:26:
        4a:2c:99:78:f1:f5:81:17:e0:d9:f8:e5:c6:ca:3c:f8:79:df:
        cf:c7:27:02:90:01:c2:64:b6:11:8c:b1:fe:35:3f:63:06:3d:
        45:ac:63:79:df:0a:25:4d:8f:7f:96:87:46:dd:58:6f:c8:ae:
        4f:36:72:ef:37:6a:ee:e1:a3:51:fe:ce:b3:f1:71:af:14:13:
        66:c3:e9:e1:cf:bf:93:83:ba:34:1f:c4:30:9c:ee:e0:46:6a:
        9c:c8:29:12:f5:d1:9d:6f:9d:76:85:45:93:41:7e:af:13:ef:
        b1:69:13:8b:87:dd:5f:c2:bd:bf:75:9a:c2:94:c3:6c:82:b5:
        9d:5f:eb:18:a0:5d:a3:d0:17:bc:47:0e:8f:aa:a5:1f:08:bc:
        c9:49:9d:88:21:c5:93:ed:b9:5c:56:97:7e:1a:97:79:3d:4a:
        36:5a:3e:dd:cf:dc:ec:6f:29:85:8a:72:19:f5:ee:cf:ec:9f:
        71:79:62:7b:b5:a0:d4:8e:87:c0:b5:b7:4e:e1:d5:29:7f:b1:
        06:6b:a4:92:1f:19:81:45:12:61:7e:a6:b8:de:67:a5:b1:38:
        62:e8:8a:ac:87:05:9c:e8:2e:21:c4:c4:bd:59:82:f9:0e:f4:
        32:e4:36:15:5a:06:0a:04:56:cd:12:4e:d0:ed:29:41:2e:b8:
        e8:cf:f0:f4:f1:0c:0b:f3:13:47:97:17:82:ab:cc:fc:05:df:
        28:24:2a:bc:49:77:3f:1c:57:86:25:29:ac:ce:7f:13:b9:cb:
        69:c1:f8:c0:92:70:c8:1d