Microsoft has recently begun replacing expiring Secure Boot certificates on eligible Windows 11 systems running 24H2 and 25H2 ...
The January Patch Tuesday updates for Windows refresh the expiring certificates for Secure Boot, which protects your computer against bootkit malware.