Specify "Subject/Certification Valid From" subpacket?

We could specify a novel subpacket to allow for temporary certifications by preventing backdating validity to key creation time. We could also include an expiration timestamp in the wire format so that it also fulfilled the role of "certificate expiration time" (and thereby obsoleting "signature expiration time", see also #8).

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information