It may appear to suggest that, but it doesn't. These are code signing certificates not TLS. The certificate isn't for the executable but for the ability to sign an executable. If you update an executable with a new executable that was signed with a certificate that was expired at the time of signing, then you will encounter the issue.