#Yes, I have introduced new certificate with the same old SSID, but clients are getting notified to accept the new certificate.
#as you said when client get roamed clearpass receiving a Time-out message.
#but some users keep authenticating even they accept the new certificate, all are mobile users(Apple, Samsung)
# I have checked with my Mobile(Apple) and it is working fine