thank you @tommie - I actually already solved it by deleting the “mutatingwebhookconfiguration” that is no longer used by 2.3 and then deleting and reinstalling the operator.
alternatively I could have uninstalled the old operator with the version that I installed it with - not the successor.
I got the nudge from another thread: X509: certificate signed by unknown authority - #4 by Daniel42