Apparently the expiration date of the certificate ends up as a pref at some point. I don't remember what the name of the pref is, but someone posted it.