Two such certificates were part of the Nvidia hack attack haul we reported on last week.
Among all the sensitive hardware and driver data spilled by hacking extortion group Lapsus$, there were some expired but still usable Nvidia code-signing certificates.