In looking over the certificates between two different
implementations of PEM, I have found a difference in how UTCTime was
encoded in the certificates.
One certificate used: YYMMDDHHMMSSZ and the other: YYMMDDHHMMZ
The former included seconds and the later only minutes. Which one is
correct?
This distinction is important for implementations that decode
a certificate into a structure that represents time in a local format
and then goes to reconstruct the original DER for signature
validation. I believe we agreed to always use GMT (Zulu time) but what
about whether or not to include seconds?
-Jeff