bug 893: fixed check of certificate retension time