CERT is NOT valid as per profile

[ljohnson21]

I have a cisco 3945E which is able to successfully establish a IPSec connection.  But after about 15 minutes the connect drops and I get the below error.

CERT is NOT valid as per profile.

I am trying to determine why the certs would initially be valid fail later.

I am using certificate match under the profile.  the certificate match using the subject name and the issuer name.

Has anyone ever seen this?

thanks.

[m.kafka]

There is more than subject and issuer in a certificate. Do a detailed debug (pki transactions detailed) or pki messages and decode the ceritificates yourself.

What is the peer? Are there any additional isakmp resp. ikev2 negotiations close to the error message?