Some HTTPS websites with forums, blogs, or infrequently updated content often have expired certificates. Government, bank, or healthcare sites typically stay up-to-date but should be double-checked.