EXPIRED_BUT_VALID_IN_THE_PAST

Either the certificate, the OCSP, or the CRL has expired as of today but we have confidence that this certificate was valid in the past, when the signature was created. According to the specification, this is an indeterminate state (warning).