Hello dcdeal​  Devices will continue to boot after certificate expiry. After certificates have expired, devices can no longer apply security updates to Boot manager and Secure Boot.  Refer to When Secure Boot certificates expire on Windows devices - Microsoft Support for details regarding impact of expired Secure Boot certificates