When a code signing certificate expires, antivirus programs like Microsoft SmartScreen and Google Safe Browsing won’t trust your software anymore. Of course, unless there’s a timestamp on it. But, if the code has a timestamp, it stays valid even if the Code Signing certificate expires.