/** * Check certificate validity. * * @param Certificate $cert * @throws PathValidationException */ private function _checkValidity(Certificate $cert) { $refdt = $this->_config->dateTime(); $validity = $cert->tbsCertificate()->validity(); if ($validity->notBefore()->dateTime()->diff($refdt)->invert) { throw new PathValidationException("Certificate validity period has not started."); } if ($refdt->diff($validity->notAfter()->dateTime())->invert) { throw new PathValidationException("Certificate has expired."); } }