Found the answer here:
First you need to run this script to obtain and install new CA's certificates
FQDN=$(hostname -f)
CERTS2=("e5.pem" "e6.pem" "r10.pem" "r11.pem")
for CERT2 in "${CERTS2[@]}"
do
if command -v wget &> /dev/null
then
wget -O "/etc/ssl/$FQDN/$CERT2" "https://letsencrypt.org/certs/2024/$CERT2"
elif command -v curl &> /dev/null
then
curl -o "/etc/ssl/$FQDN/$CERT2" "https://letsencrypt.org/certs/2024/$CERT2"
fi
ipa-cacert-manage install "/etc/ssl/$FQDN/$CERT2"
done
Then as usual install them:
ipa-server-certinstall -w -d /etc/ssl/private/privkey.pem /etc/ssl/private/cert.pem --pin=''
And just restart ipa:
ipactl restart
That it! Maybe this will helpful for someone.