[foepys]

What happens when the cert root expires? Does it not expire or does Apple grant an eternal valid signature when apps were signed before the root expired?

[jerrysievert]

For apps I’ve downloaded on my iPhone, there are sometimes updates that denote Apple updated the key. Assuming that’s App Store only behavior though.

[saagarjha]

Apple just did this recently for iOS 14.5, actually.