While worked for years for a hosting provision platform, I still had the question, what does it mean to have an expired certificate?

After reading, big meh. Mitm, ughz, that was always possible. On top of that everyone uses cloudflare and includes the nsa by default making ssl kinda useless anyway.