Hmm, if they are standalone AP's strictly the certificate is the running config, and theoretically it could be replaced by another, by copying and pasting a new cert in the running config, but that is unsupported , to say the least.
For 'controller-based' AP's ; they are supported untill 8.0.x, where a command is available to ignore old certificates :
(Cisco Controller) >config ap cert-expiry-ignore {mic | ssc} enable
From a technological viewpoint, I would say they will be very outdated, in 2026, and should probably be dumped earlier.
M.
-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '