Hi, I never saw this option. What I know that you check a option when you are creating a new certificate to define "Allow expired certificate".

Hi Nathan, Always is a good practice look and check what owasp top 10 list has.Look at "API Security Topics and Best Practices" in https://community.apigee.com/articles/56382/apigee-api-platform-learning-guide.htmlGood luck.