[chuachongchee]

I do believe the cert will auto renew itself, but i only know this of NGX, prior versions i'm not sure... i'm pretty sure NGAI R55 does that too...

U cant reset SIC due to that u have VPNs running i believe?

This seems like a destructive move, but u cant be anywhere worse then now... try.. IF
1) Your Site-to-Site VPNs are using pre-shared keys NOT cert
2) Your RemoteAccess VPNs are using local checkpoint database NOT cert

Procedure
- Backup configuration using upgrade_export
- Roll back clock so everything works
- remove your vpn cert in firewall object
- cpstop
- fwm reset_sic
- cpstart
- login to dashboard
- reinitialise your vpn cert

This should resolve your issue..