I downloaded Google's Cloud SDK installer today, and upon checking the certificate to validate it, I noticed something strange: the expiration date of the certificate appears to be December 22nd 2019 - over four months from today, April 30th 2020. Despite this, however, Windows displays the certificate as valid and doesn't seem to care that the certificate is past its expiration date.

Screenshot of the certificate details. Notice the expiration date.

What is happening here, then? Why does Windows consider this certificate valid even though it expired four months ago? I was under the impression that certificates can no longer be trusted after they expire, and require a renewal. Is this not the case with software signing?

1 Answer 1


It's OK if the certificate has expired - as long as the timestamped signature on the file that you downloaded was made while the certificate still was valid.

See https://comodosslstore.com/resources/how-to-avoid-code-signing-certificate-expired-issues/ for more info.


You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .