Merge pull request #53 from elly/cert-time

[tlsdate] fix certificate time compensation; in theory - we want this ordering.