Hi Milad,
As per this document from IBM https://www.ibm.com/support/pages/node/7176188
there is tomcat keystore already contains the widely trusted TLS certificate, "DigiCert Global Root G2”
and After the "Baltimore CyberTrust Root" certificate expires on May 12, 2025,
the "DigiCert Global Root G2" cert will be in effect.
Hence, it’s not required to renew the "Baltimore CyberTrust Root" certificate before its expiry on May 12, 2025.
Best regards,