Sure it is legit, it just has expired. Actually to my opinion this should not throw an error at all, because the cert was valid at signing time, but well.....
As there currently is no service providing free code signing certificates you will see the error til I update the code. After that you will see errors about the certificate not being trusted, because it will be self signed