I've tried this, and succeeded only in knackering the environment entirely. Luckily, it was a test environment.
Things which need to move/change are the ICL databases, which are encrypted with the CA server's ID (I think). In addition, there's the $CertificateAuthorities in the Domino directory...