A certificate used on an ecommerce web server is about to expire. Which of the following will occur if the certificate is allowed to expire?

A Certificate Revocation List entry is created when a certificate is deliberately revoked before its natural expiration - for example, due to key compromise - not when it simply reaches its expiration date.

When a TLS certificate's expiration date has passed, the client browser's certificate validation check fails because the current date falls outside the certificate's valid period. The browser then presents a prominent warning or error page notifying the user that the certificate is invalid or untrusted. The server may still attempt to negotiate an encrypted connection, but users must manually bypass the browser warning to proceed, which many security-conscious users will not do.

An expired certificate does not cause the web server to stop functioning; the server continues to serve requests and users can often bypass the browser warning to access the site, though this is inadvisable.

An expired certificate does not disable or remove encryption from the site; the server still initiates TLS negotiation, but the client's validation of the certificate's time validity fails, triggering a warning.