All extensions disabled due to expiration of intermediate signing cert