Merge "Test specifying CERTIFICATE_NOT_{BEFORE,AFTER}"