this means the connection to the server can not be trusted and is susceptible to man-in-midddle ,
and CIC needs to renew their certificates from Verisign or any other trustworthy certificate providers.
I am not sure how much sensitive information is on the ecas, but i am assuming it is very basic, in that case it is not a big deal as we are not dealing here with credit cards or payments or others.