“Signing code with an expiring cert is … planned obsolescence”