When the ClearPass (cppm) server certificate is about to expire it must be renewed. The new certificate will then be installed on the server. This however will change the certificate fingerprints that end users can verify before connecting to either UCCS-Wireless or eduroam.
When the cert is renewed, the next time a users device connects to either UCCS-Wireless or eduroam, they will likely be asked to accept the new certificate - during which time they should verify the fingerprints.
This should occur on most devices, but it will not occur on all due to differences in operation systems (ie... windows vs apple vs android vs chromeOS etc)