From 0ec7c8b62c20e1d8f50fc6b7386aef126576f7ad Mon Sep 17 00:00:00 2001
From: Ruben van Staveren <ruben@verweg.com>
Date: Wed, 27 Jul 2022 13:39:35 +0200
Subject: [PATCH] Only load valid certificates

---
 sort_certificate.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/sort_certificate.py b/sort_certificate.py
index 98fb7b0..819075e 100755
--- a/sort_certificate.py
+++ b/sort_certificate.py
@@ -319,7 +319,8 @@ def load_root_issuers():
                 continue
 
         root_issuers = {str(root_cert.get_subject()): root_cert
-                        for root_cert in root_certs}
+                        for root_cert in root_certs
+                        if not root_cert.has_expired()}
         return root_issuers