TLS certificate expired
The certificate's notAfter date is in the past.
Why it matters
Browsers refuse an expired certificate, and users see a warning instead of the site.
What to do
Renew the certificate and install the new chain before the current one lapses.
Reference
Certificate validity, protocol version, and cipher choice determine TLS trust and strength.