So what if the certificate did expire. Happens to all kinds of companies, large and small.
Doesn't make it criminal. The company statement is that
was offline due to a security-based upgrade during the last few days - it is online now.
The facts show that the certificate was updated on Friday. If you want to assert that it had expired... so what! The facts support that a new certificate was issued. Perhaps from a new and improved provider? Maybe someone else can access the previous certificate if they want, but really... so what?