datetime.datetime.fromtimestamp applies timezones, which is unintended. Fixes a time drift on revoked certificates.