Thanks.
The question came up here during testing when someone somewhere found or
generated a CRL with a post-dated entry. As an implementor I'm glad that
such things are illegal; as a user, I concur with the Japanese delegation
that they can be useful.
/r$