the notAfter instead of maxNotAfter should be set to CA's notAfter