typo
CERT_Get*Name needs to be freed with PORT_Free
BR 9.4.1: Validity Period