Don't use expired certificates if possible.