Refresh “now” before checking notAfter

1 files changed, 2 insertions, 1 deletions

diff --git a/packages/server/src/attestation/verifications/verifyPacked.ts b/packages/server/src/attestation/verifications/verifyPacked.ts
index 3c32b16..d652d68 100644
--- a/packages/server/src/attestation/verifications/verifyPacked.ts
+++ b/packages/server/src/attestation/verifications/verifyPacked.ts
@@ -70,11 +70,12 @@ export default function verifyAttestationPacked(options: Options): boolean {
       throw new Error('Certificate version was not `3` (ASN.1 value of 2) (Packed|Full)');
     }
 
-    const now = new Date();
+    let now = new Date();
     if (notBefore > now) {
       throw new Error(`Certificate not good before "${notBefore.toString()}"`);
     }
 
+    now = new Date();
     if (notAfter < now) {
       throw new Error(`Certificate not good after "${notAfter.toString()}"`);
     }