[jlao]

If GitHub's cert is revoked or expired, you'll have to manually go grab the new one. You want to trust the issuer of the cert.