more precise control of the certificate validity