Merge pull request #1207 from atc0005/fix-critical-expiration-state-detection

Fix CRITICAL expiration state detection

Author: atc0005

internal/certs/validation-expiration.go

@@ -621,6 +621,9 @@ func (evr ExpirationValidationResult) IsCriticalState() bool {
 		//
 		return true
 
+	case HasExpiredCert(evr.FilteredCertificateChain()):
+		return true
+
 	case HasExpiringCert(evr.FilteredCertificateChain(), evr.ageCriticalThreshold):
 		return true