add position byte for expiration date in certificate