ESKM Client certificates have an expiration period after initial creation. After a predetermined time, the certificates are no longer valid. They should be replaced before the expiration date. Follow the steps in Creatng a Client Certificate for ONTAP (Using OpenSSL).