Then why not push the expiration back 2 days, which is effectively what the OP is proposing.<p>A reasonable thing to do instead is to give a warning like &quot;The security certificate for app X is expiring in two days. Please update it&quot; or something like that.<p>OR don&#x27;t have expiration dates on a cert, if that is preferable.