I downloaded Google's Cloud SDK installer today, and upon checking the certificate to validate it, I noticed something strange: the expiration date of the certificate appears to be December 22nd 2019 - over four months from today, April 30th 2020. Despite this, however, Windows displays the certificate as valid and doesn't seem to care that the certificate is past its expiration date.
What is happening here, then? Why does Windows consider this certificate valid even though it expired four months ago? I was under the impression that certificates can no longer be trusted after they expire, and require a renewal. Is this not the case with software signing?