pam.account.expired.mesg

This configuration parameter specifies the message displayed if a user attempting to log on is denied access because the user’s account has expired.

For example:

pam.account.expired.mesg: 
Account cannot be accessed at this time. Please contact your system administrator.