The Primary AD FS Token Decrypting certificate is about to expire in less than 90 days. AD FS cannot decrypt tokens from ...