always revoke the certificate, even if it is already expired