“an expired certificate isn’t normally revoked”