That assumes that the application even *know* to check the "only valid if issued...

		ayende on Dec 6, 2022 \| parent \| context \| favorite \| on: Linux Certificate Authority root stores have a too... That assumes that the application even know to check the "only valid if issued before" flag.