> he expiry date is enforced for signing new binaries

Does this means that updating my system kernel would fail or even break boot?