```release-note:bug
secrets/pki: consistently use UTC for CA's notAfter exceeded error message
```