Remove the expired certificate from the keystore. To remove the certificate from the JKS keystore, use the following command,
keytool delete -alias verisignserverca -keystore domain-dir/config/cacerts.jks
To remove the certificate from the NSS keystore, use the following command,
certutil -D -n verisignserverca -d domain-dir/config