Update expiring Mongo cluster SSL certificate
If you CA don't change, just cert expiration time, you should not have any problems to change cert one node at the time (rolling upgrade).

But...
Basically following this procedure, so you "downgrade" you nodes ssl level allowSSL and doing change of certificate one node at time. After that you can bring ssl level back to requireSSL after everybody have new certs.