Expired cert is used instead of new one

[Bruce5051]

@bicycle

not very inclined to reveal my hostnames.

Why? See Certificate Transparency is going to make the public anyway.