I am answering my own question:
The easiest solution to solve that issue is to add a hostname to the datanode in the docker-compose.yml file of the name that was previously created dynamically and is expected by the certificate.
This solves the issue and graylog is working again.
Nevertheless it would still be interesting to know how to replace the certificate once graylog does not fire up again.