Hi guys.
I'm facing the same problem as you. Inplace upgrade using TS. After the upgrade, all certificates are gone. VPN certificates can be generated by remote support, however post-signum certificates could be a problem.
I don't want to go the Feature Update way, so is the only solution to check the MVLSC and try the updated images?
Thanks and good luck.