Including the notAfter time in CRLiteQuery
- allow us to partition the set of certificates by (some function of) notAfter, which would potentially reduce filter size; and
- allow us to perform a validity check in Queryable::in_universe, which would simplify the query logic.
See also: #1
