The JSSE-based secure RMI transport provider doesn't check whether
the certificates in the subject's public credentials have expired.
It needs to be updated to make this check at the start of each call,
both on the client and server sides, and to permit calls again if
expired certificates are replaced with valid ones.