26.9 rejects expired certificates, defaults PDF signatures to SHA-256, and makes LogLevel work. What breaks in an existing pipeline, why each change is right, and how to handle the exceptions....not quietly allow a future-dated one. Change 2: SHA-256 by Default...demonstration works whatever today’s date is and there is nothing sensitive...