The public certificate has expired. After renewing the certificate with ConsoleOne, the certificate information might not show up with the new date immediately when viewed.
I ran pkidiag to repair the certificates, but I still got an error stating the certificate had expired when I tried to access NRM on port 8008 and 8009.
Restarting the httpstk through NRM config usually fixes the certificate, but it does not if NDPS is running on the server.
If this occurs, perform the following steps to resolve the issue.
1. Unload NDPS.
2. Restart httpstk.
3. Restart NDPS.
The certificate should be fixed.
Disclaimer: As with everything else at NetIQ Cool Solutions, this content is definitely not supported by NetIQ, so Customer Support will not be able to help you if it has any adverse effect on your environment. It just worked for at least one person, and perhaps it will be useful for you too. Be sure to test in a non-production environment.