Due to expired CA I had to delete it & re-create (not much fuss)

But now I have 12 servers that I have to redo certificates for.
The usual SSL CertificateIp, SSL CErtificateDND are OK, but what are the
NAASKMO & DNS AG & IP AG certificates?

They were auto created by setups or sorts, how do I re-create this lot?