> The Right Thing is to have the certificate contain a time stamp of when it was issued Well of course they should, that's why it is right there, called "not b

> The Right Thing is to have the certificate contain a time stamp of when it was issued Well of course they should, that's why it is right there, called "not before" > The client should decide whether the certificate is still trustworthy. The cert can contain a recommended expiration date, but the dispositive information should be the issue date. Well, that exaclty is the case. Most clients decided to honor the recommended expiration date, and Apple just announced they won't.