Regarding "Mint's old cert": as many people have pointed out elsewhere, new server certificates can be backdated, so an old date is not in and of itself indicative of a problem.