you are potentially hitting this field notice:
https://www.cisco.com/c/en/us/support/docs/field-notices/639/fn63942.html
Particully this bug CSCvs22835
You need to be running 8.5.160 or later and apply then:
If you have upgraded to software with this fix, then:
* configure "config ap cert-expiry-ignore mic enable" on the WLC
* set your date back, so that unfixed APs can join
* wait till all AP-COS APs have downloaded the fixed code, and have rebooted and rejoined
* now you can set the WLC date back to the current date
*****Help out other by using the rating system and marking answered questions as "Answered"*****
*** Please rate helpful posts ***