Currently, the expiration date logic is 3 months added to updated at. It should be inferred from the signed public key