Looks like Microsoft is getting ahead of the certificate management and secure boot issues that are forth coming to Windows.
https://www.neowin.net/news/microsoft-updating-windows-8-era-secure-boot-keys-so-your-modern-pc-keeps-booting-flawlessly/
Microsoft has declared that it is beginning to roll out new Secure Boot keys (CA) from 2023 to replace the previous ones. The outgoing ones are from 2011, issued during Windows 8 when Secure Boot was first debuted by the Redmond giant. These certificates are set to be 15 years old a couple of years from now in 2026, which is when they will expire