Expirations and certificate URIs