Ignore expired certificates (in the future we'll have an option for this)