assertion/certificate expiration and future issuance tests now pass (requires changes to jwcrypto not yet landed)