26.9 rejects expired certificates, defaults PDF Signatures to SHA-256, and makes LogLevel work. What breaks in an existing pipeline, why each change is right, and how to handle the exceptions....What To Do Before Upgrading Verification Changed in the Same Direction...turns up two causes: the signatures were written with SHA-1,...