This v2 endpoint rejects expired certificates. When creating company certificates, make sure that you are calling the v2 version of this endpoint, and not v1.
Roles and privileges
Calling this endpoint requires the USER_PROVISIONING or the SUPER_ADMINISTRATOR role.
See Bot Permissions for a list of roles and associated privileges.