: The 2011 Secure Boot certificates are set to begin expiring in June 2026 . Microsoft is currently pushing updates to transition devices to newer 2023 certificates to maintain security protections.

The Microsoft Root Certificate Authority 2011 was introduced to upgrade cryptographic strength across the Windows ecosystem. It moved the industry away from older, vulnerable standards. Core Technical Specifications

If you tell me you're trying to fix, I can provide a more tailored guide for that scenario. Microsoft Root Certificate 2011.cer

CN=Microsoft Root Certificate Authority 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

It allows Windows to trust intermediate Certification Authorities (CAs), such as the "Microsoft Code Signing PCA 2011".