&gt;Apple issued a new root certificate using the latest OpenSSL standard. The apps that &quot;expired&quot; <i>were using an out-of-date version</i><p>And they were simply following Apple&#x27;s recommendation to statically link OpenSSL. An app which hasn&#x27;t been updated in a year or two could easily fall into this trap.