Currently we try to generate UTCTimes and often fail because of the two-digit years. In RFC5280 it's specified that all dates after the year 2050 should be encoded as GeneralizedTime values instead.