Bug #2872
Updated by Junxiao Shi almost 10 years ago
`KeyChain::prepareUnsignedIdentityCertificate` KeyChain::prepareUnsignedIdentityCertificate currently doesn't set FreshnessPeriod with semi-devastating semi-devistiting result: once retrieved, certificate considered not stale forever until evicted from cache. This prevents new versions of certificates from being to be retrieved.