Ok, so `getcert list` only showed that the other 6 were also in monitoring state.
But your solution from the other thread worked for me, too. I just had to set the values
of the `requiredSecret` attributes in /etc/pki/pki-tomcat/server.xml to those of the
`secret` attributes. After a restart the certificate was automatically renewed.