Apple sends out emails about a month before your certificate expires - I bet they didn’t check it and/or thought the expiry would only apply to new builds
*replaced pronouns and specified
The certificate was revoked, not expired. And expired code signing certs don't prevent Mac apps from running, they just prevent new builds from being signed.