The Security Module identity certificate and CA (trusted) certificate must be present for SIP TLS. An alarm is raised if one of the certificates cannot be loaded because it is invalid, expired, or revoked.