Hmm after the rewrite, are we checking for time validity of the certificate?
Maybe I've missed it.