In a discussion on gnupg-users , i observed that it's not uncommon for
someone to update the expiration date on their primary key but fail to update
the expiration date on their encryption-capable subkey.
This leaves the user with a valid OpenPGP certificate, but one that is not
possible to encrypt to. Werner suggested  that there should be a warning in