Is there a particular reason for the SHOULD in the following?
The original signing-time attribute defined in [CMS] has the same semantics as the updated signing-time attribute specified in this document. If both of these attributes are present, they SHOULD provide the same date and time.