pub const CERT_VALIDITY_BEFORE_START: u32 = 1u32;