The OS is "Fedora release 25 (Twenty Five)".
I compared the output from "ldapsearch -LLL...", it differs. But in order to
make ipa0 work I temporarily broke connection between nodes (with iptables) so it's
normal.
Yhe date is
[root@ipa0 ~]# date
Sun Oct 20 19:46:18 MSK 2019
All the other certificates are valid. I use Let's Encrypt certificates and I rolled
them back to the ones valid in October.