C.7.a WT27 The CA notifies the affected subscriber in a timely manner when a certificate generated by the CA is about to expire.