Okay, the reason was that new version of mysql refuses to accept certs with the same Common Name etc.
I reissued certs for server and client using different metadata this time, updated my.cnf on both master and slave servers and now it works again.
Do not forget to login into MySQL
mysql -u root -p
and update master host details if necessary (...