Add timezone (utc) info into the cert not_valid_after field (#701)

* Add timezone (utc) info into the certificate datetime not_valid_after field.

Signed-off-by: Christian S. Perone <christian.perone@gmail.com>

* Removing timestamp from the comparison.

Signed-off-by: Christian S. Perone <christian.perone@gmail.com>

---------

Signed-off-by: Christian S. Perone <christian.perone@gmail.com>

Author: perone

sigstore/sign.py

@@ -137,10 +137,9 @@ def _signing_cert(
         """Get or request a signing certificate from Fulcio."""
         # If it exists, verify if the current certificate is expired
         if self.__cached_signing_certificate:
-            if (
-                datetime.now(timezone.utc).timestamp()
-                > self.__cached_signing_certificate.cert.not_valid_after.timestamp()
-            ):
+            not_valid_after = self.__cached_signing_certificate.cert.not_valid_after
+            not_valid_after_tzutc = not_valid_after.replace(tzinfo=timezone.utc)
+            if datetime.now(timezone.utc) > not_valid_after_tzutc:
                 raise ExpiredCertificate
             return self.__cached_signing_certificate