The implementation of x509-certificate/src/asn1time.rs seems correct.
but using it in RFC3161 TimeStampToken decoder is incorrect, causing Malfrom error for valid TstInfo.
Under the restrictions of RFC 2459 Section 4.1.2.5.2,
granularity of GeneralizedTime MUST be limited to one second.
But in RFC 3161,
GeneralizedTime can have fraction-of-time (The syntax is: YYYYMMDDhhmmss[.s...]Z) (RFC says the precision SHOULD be limited to one second, though)
my temporal fix is allowing fraction-of-time in x509-certificate/src/asn1time.rs
ngicks@ed45a91
but this does not look neat.
any ideas?