[tialaramex]

> The whole point of the expiration is in case a hacker gets the private key to the cert and can then MITM

Nope. So all that happened here is that you were wrong.