You shouldn't need to delete expired certificates (they should be ignored automatically), though I can see why you'd want to. I'd expect the pre-installed certificates to be getting updated via package updates, though it doesn't come as a surprise that Nokia have failed to do so.