The Secure Boot certificates powering one of Windows’ most critical security features expire in June 2026 — and not every PC is going to get the fix automatically.