When verifying SignedData (even with checkChain = true) the certificate validity is not checked.
Here none of both certificate params is passed to the tstinfo:
|
if (!(await tstInfo.verify({ data }, crypto))) { |
The TSTInfo.verify expects the notBefore or notAfter parameters of the signers certificate to be passed.