Certificate for %1 with Thumbprint %2 is about to expire or has already expired.
Renew a CA certificate
A computer certificate on a managed computer, not a certification authority (CA), must be renewed when it passes 90 percent of its validity period or has expired. Because a successful renewal will generally be initiated before the certificate reaches 90 percent of its lifetime, this error indicates that there may be a problem automatically obtaining a new certificate via autoenrollment.
To perform this procedure, you must have membership in local Administrators or Users on the computer that logged the error, or you must have been delegated the appropriate authority.
To renew a CA certificate:
* Click Start, type mmc, and then press ENTER.
*If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
* On the File menu, click Add/Remove Snap-in, click Certificates, and then click Add.
* Select the user or computer account that logged the error, and click Next.
* Click Finish, and then click OK.
* In the console tree, click Certificates - Current User or Certificates (Local Computer), and then click Personal.
In the console tree, double-click Certificates, double-click Personal, and then click Certificates.
* Locate the certificate with the thumbprint listed in the event log message.
* Right-click the certificate, and select one of the Renew Certificate options to start the Certificate Renewal Wizard and renew the CA certificate.