I'm testing the setting of 'Allow Authentication of expired certificates to allow certificate renewal in authorization policy' by ise.