Per 4.1.2.5.2 of RFC3280, Validity MUST be in GMT.