LetsEncrypt certificates are valid for 1s too long

Boundaries are classic issues and often related to the definition of parameters like in this case.

Defining a time period with "not before" and "not after" means both ends are included.