@seph: for the date issue, this is part of the doc on openssl:

The ASN1_TIME_normalize() function converts an ASN1_GENERALIZEDTIME or ASN1_UTCTIME into a time value that can be used in a certificate. It should be used after the ASN1_TIME_set_string() functions and before ASN1_TIME_print() functions to get consistent (i.e. GMT) results.

Here: https://docs.openssl.org/3.0/man3/ASN1_TIME_set/ We don't call it (in

convertAsn1TimeToString

), so it's possible that the extracted date is not GMT beforehand, while we have a comment that says that the print function will always return a GMT time