Microsoft’s KEK CA 2011 is set to expire on June 27, 2026, and the real question is whether that deadline could interfere with DBX updates.