<!--
{
  "availability" : [
    "iOS: 17.4.0 -",
    "iPadOS: 17.4.0 -",
    "macCatalyst: 17.4.0 -",
    "macOS: 14.4.0 -",
    "tvOS: 17.4.0 -",
    "visionOS: 1.1.0 -",
    "watchOS: 10.4.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "LightweightCodeRequirements",
  "identifier" : "/documentation/LightweightCodeRequirements/OnDiskCodeSigningFlags/ValueSet/isCertificateExpirationEnforced",
  "metadataVersion" : "0.1.0",
  "role" : "Type Property",
  "symbol" : {
    "kind" : "Type Property",
    "modules" : [
      "LightweightCodeRequirements"
    ],
    "preciseIdentifier" : "s:27LightweightCodeRequirements06OnDiskB12SigningFlagsV8ValueSetV31isCertificateExpirationEnforcedAEvpZ"
  },
  "title" : "isCertificateExpirationEnforced"
}
-->

# isCertificateExpirationEnforced

Flag indicating that the signature on this code should be treated as invalid if the certificate it was signed with expired.

```
static let isCertificateExpirationEnforced: OnDiskCodeSigningFlags.ValueSet
```

## Discussion

By default code signatures are valid if the certificate they were signed with was valid at the time of signing. This flag invalidates signatures from certificatest that are expired at the time of use.
This is equivalent to `CS_CHECK_EXPIRATION` in C APIs.

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)