> If you get an expired certificate, you can fix it close to immediately. Now you can. But getting a new certificate used to be a slow process. And you could

> If you get an expired certificate, you can fix it close to immediately. Now you can. But getting a new certificate used to be a slow process. And you could still mess up irrevocably by mis-issuing HSTS headers, in which case you would just have to wait until those time out.