But if a program keeps running with an invalid security certificate, what is the point of having the certificate at all? If the practice is &#x27;let the program with an invalid cert run silently for 2 days&#x27;, then you aren&#x27;t gaining any security at all. Malware could do everything it needs in 48 hours.