This! Certificate expiry is mostly an UX problem. While expiration is needed, the first step should be a warning, not cancellation of service. Imagine if your c

This! Certificate expiry is mostly an UX problem. While expiration is needed, the first step should be a warning, not cancellation of service. Imagine if your car simply didn't start when you crossed the service interval, instead of just annoying you with a warning. I don't mind so much that Mozilla let their cert expire, but I'm pretty angry that I couldn't just click somewhere to dismiss the warning. Of course, I'm talking just about expired certificates, revoked ones are a different story.