For 8.2.1 GA firmware the “default” SSL cert is expired. It’s the industry standard all generated SSL certs will only valid to 12 months (Reference Industry standard)
Firmware 8.3.0 is in beta 2 now , when you upgrade the device using Firmware 8.3.0, it will have the new SSL cert.
In the firmware 8.3.0, we have implemented a new feature that will auto update the SSL certificate from IC2 :
Group Level → Device System management:
With this option enabled, Balance/MAX and AP devices running firmware 8.3.0 and 3.9.3 or above respectively will receive the most up-to-date captive portal default SSL certificate from Peplink automatically without needing to update their firmware in the future."
IC2 Release notes reference :

