CUCM 8.5.1 restore did not restored some certificates

[mis]

Hello,

Recently we reinstalled single node CUCM 8.5.1 system.

Restore from backup (DRS) did not restore several certificates:

CallManager.pem

CAPF.pem

TVS.pem

These certificates was created during fresh install and was not restored from backup.

As a result phones can't verify signatures on TFTP config files.

What can be done except erasing ITL on phones ?

[mis]

Is it possible to decrypt backup TAR files ?

Probably we can extract old certificates from backup and install them istead of new.