[bug] get certificate times as UTC, add tests