thanks for the info. Looks as if the best way for us is to deinstall the old 1.9 module before updating the platform, and to install the 2.3 module after updating.
We now have to find a way to document certificates derived from the old version incl. the hash code.
Best Regards, Marcus