Expiry is only one part
A certificate also needs a trusted chain and a hostname match. Modern TLS configuration matters beyond the date.
Validate hostname, issuer, protocol, expiry and certificate chain.
A certificate also needs a trusted chain and a hostname match. Modern TLS configuration matters beyond the date.