Check start < end instead of start <= end
TP is modified to support all 3 types of time validity restrictions for future use of other certificates.