Eventually, your PKI Services CA and RA certificates will expire. To avoid complications related to an expired CA or RA certificate, renew those certificates before they expire. (You will receive MVS™ console message IKYP026E as the expiration date approaches.)