Reply to post:

No different to an SSL cert to my mind, they're time limited and expire more for security of course ( yeah, right! ) but it's plain to see if you open one up and check the meta data "you got until XYZ date to replace me!".