pub fn cert_validity(der: &[u8]) -> Result<(i64, i64), Err<X509Error>>
Extracts the validity period (notBefore, notAfter) from a DER-encoded certificate as UNIX timestamps (seconds since epoch).