Verify all the certificate  that are available in XYGATETR volume by executing the below command. 
To verify certificate?s signature, use the following command line options:

xycert ?check ?cert:<file> [?cacert:<file>]

Command Line Options:

Here is an example:

$SYSTEM.XYGATETR> XYCERT -check -cert:CACERT

If any of the certificate throws cryptlib error, that error may occur if system DAYLIGHT_SAVING_TIME is set to TABLE however, the entries of DST transition table doesn?t have entry to translate the end date of the certificate.

Identify if the system is using a daylight savings transition table as below.

TACL> scf info subsys $zzkrn
SCF - T9082L01 - (18FEB15) (31OCT14) - 08/09/2016 03:26:08 System \GALAXY
(C) Copyright 1986-2014 Hewlett-Packard Development Company L.P.
NONSTOP KERNEL - Info SUBSYS \GALAXY.$ZZKRN
Current Settings
*DAYLIGHT_SAVING_TIME ................ Table
*NONRESIDENT_TEMPLATES................ $SYSTEM.SYSTEM.TEMPLATE
*POWERFAIL_DELAY_TIME................. 3285
*RESIDENT_TEMPLATES................... $SYSTEM.SYSTEM.RTMPLATE
SUPER_SUPER_IS_UNDENIABLE............ ON
SYSTEM_NAME.......................... \NODE
SYSTEM_NUMBER........................ 200
SYSTEM_PROCESSOR_TYPE ............... NSX-G
*TIME_ZONE_OFFSET..................... +10:00
*TNSMISALIGN.......................... FAIL
*DESTINATION_CONTROL_TABLE............ MEDIUM
*TLE_LIMIT............................ 20000
*TIMER_GRANULARITY.................... DEFAULT_ORDINARY

If System uses DAYLIGHT_SAVING_TIME as Table then, Use the TACL ADDDSTTRANSITION command to extend DST table entry to cover the certificate end date.

If you are unable to locate the solution needed or if you need additional assistance please Click Here to open a case from our Customer Care Portal.