Comment by pona-a

Yeah, that's usually what happens. But many of those errors are TLS protocol errors, not expired certs.