Use UTC to heck certificate validity
diff --git a/ChangeLog b/ChangeLog
index 83f1528..0c18ff7 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -16,6 +16,7 @@
    * x509_crt_info() now prints information about parsed extensions as well
    * pk_verify() now returns a specific error code when the signature is valid
      but shorter than the supplied length.
+   * Use UTC time to check certificate validity.
 
 Security
    * Avoid potential timing leak in ecdsa_sign() by blinding modular division.