Handle UTC vs specified-timezone for certificate extractors.  Bug 1541