>> Why has the certification been allowed to expire?
The certificate WILL expire 1 year after issued. It must be replaced each year with a new certificate. It’s a PITA.
FR should switch their Certificate Authority to LetsEncrypt. It is free and has an easy-to-use auto-renewal script (ACME and WinACME) so you never need to worry about forgetting to renew a certificate.
That’s option. rpms available for ez setup too.