Netscape MANAGEMENT SYSTEM 6.0 - COMMAND-LINE Manual page 114

Answers to Common Questions
Although certificates expire, valid signatures do not. Signature validation is
based on the date of the signature rather than the time verification occurs. If a
certificate chain was valid at signing, Communicator will continue to recognize
that signature even after certificates in that chain expire. Note that this would
not be true, however, if an object was signed using the
the original timestamp and forces validation to rely on the current status of the
certificate chain.
114 Netscape Certificate Management System Command-Line Tools Guide • March 2002
option which omits
-z