Historical (old) reports should be signed by a user with current credentials; expired PFX files cannot be used for signing historical reports.