# x509.log: certificate.not\_valid\_before & certificate.not\_valid\_after

**URL:** <https://community.zeek.org/t/x509-log-certificate-not-valid-before-certificate-not-valid-after/4055>\
**Category:** Zeek\
**Created:** [March 17, 2016, 3:33pm UTC](https://community.zeek.org/t/x509-log-certificate-not-valid-before-certificate-not-valid-after/4055 "2016-03-17T15:33:25Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![puntogtg](https://avatars.discourse-cdn.com/v4/letter/p/c37758/32.png) [@puntogtg](https://community.zeek.org/u/puntogtg)\
**Post date:** [March 17, 2016, 3:33pm UTC](https://community.zeek.org/t/x509-log-certificate-not-valid-before-certificate-not-valid-after/4055/1 "2016-03-17T15:33:25Z")

</div>

Hello,  
in the x509.log normally the values regarding certificate.not\_valid\_before & certificate.not\_valid\_after look like:  
1444082400.000000 1475791199.000000  
I found some value like this:  
-3600.000000 2.153226e+09

Is it possible to modify something in order to have 2153226000 instead 2.153226e+09 ?

Thanks

Connetti gratis il mondo con la nuova indoona: hai la chat, le chiamate, le video chiamate e persino le chiamate di gruppo.  
E chiami gratis anche i numeri fissi e mobili nel mondo!  
Scarica subito l’app Vai su [https://www.indoona.com/](https://www.indoona.com/)

---

<div class="post-metadata">

**Author:** ![Seth\_Hall3](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Seth\_Hall3](https://community.zeek.org/u/Seth_Hall3)\
**Post date:** [March 22, 2016, 7:42pm UTC](https://community.zeek.org/t/x509-log-certificate-not-valid-before-certificate-not-valid-after/4055/2 "2016-03-22T19:42:24Z")

</div>

Yep, agreed. Scientific notation in the logs like that is not the desired output. Here's a link to the ticket I filed:  
&nbsp;&nbsp;[https://bro-tracker.atlassian.net/browse/BIT-1558](https://bro-tracker.atlassian.net/browse/BIT-1558)

&nbsp;&nbsp;.Seth

---

<div class="post-metadata">

**Author:** ![johanna](https://avatars.discourse-cdn.com/v4/letter/j/50afbb/32.png) [@johanna](https://community.zeek.org/u/johanna)\
**Post date:** [March 22, 2016, 8:29pm UTC](https://community.zeek.org/t/x509-log-certificate-not-valid-before-certificate-not-valid-after/4055/3 "2016-03-22T20:29:35Z")

</div>

Somewhat related - do you happen to have the certificate (or the name of  
the site from which the certificate was served)?

I am kind of curious how a negative timestamp managed to happen there...

Johanna

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:43pm UTC](https://community.zeek.org/t/x509-log-certificate-not-valid-before-certificate-not-valid-after/4055/4 "2022-05-06T15:43:29Z")

</div>


