Comment by plq

Certificates need expiration dates to be able to garbage collect certificate revocation lists.