Using an old version of java might mean using old truststores, with only old root certificates. Those don't expire often, but a server might switch to a new server certificate ultimately signed with a newer root certificate - and that new root wouldn't be in an old truststore. But the current...