Also experiencing this issue with similar specs. Appreciate your explanation, Paul.
Is there any way to know which OS for Mac would be sufficient to satisfy the expired certificate? For instance, I use certain programs, which might not be compatible with the latest OS and am considering upgrading to an older (albeit newer than mine) version of iOS...