[nijave]

Seems like it’d be fairly difficult in practice to change time on a host such that you can use an expired certificate without breaking a bunch of other stuff