> All signing certificates expire. They must. It's a fundamental part of the security model Is it really necessary? Aren't there other possible ways of invalid

> All signing certificates expire. They must. It's a fundamental part of the security model Is it really necessary? Aren't there other possible ways of invalidating a certificate other than its date?