@Test fun `time before 2050 uses UTC_TIME`() {
    val utcTimeDer = "170d3439313233313233353935395a".decodeHex()

    val decoded = CertificateAdapters.time.fromDer(utcTimeDer)
    val encoded = CertificateAdapters.time.toDer(decoded)

    assertThat(decoded).isEqualTo(date("2049-12-31T23:59:59.000+0000").time)
    assertThat(encoded).isEqualTo(utcTimeDer)
  }

  @Test fun `time not before 2050 uses GENERALIZED_TIME`() {

museum.mw museum.no museum.om museum.tt museumcenter.museum museumvereniging.museum music music.museum musica.ar musica.bo musician.io mutsu.aomori.jp mutsuzawa.chiba.jp mutual mutual.ar mv mw mw.gov.pl mx mx.na my my-firewall.org my-gateway.de my-router.de my-vigor.de my-wan.de my.eu.org my.id myactivedirectory.com myamaze.net myasustor.com mycd.eu mycloud.by mydatto.com mydatto.net myddns.rocks mydissent.net mydobiss.com mydrobo.com myds.me myeffect.net myfast.host myfast.space myfirewall.org myforum.community...

// toray : 2014-12-18 Toray Industries, Inc.
toray

// toshiba : 2014-04-10 TOSHIBA Corporation
toshiba

// total : 2015-08-06 TotalEnergies SE
total

// tours : 2015-01-22 Binky Moon, LLC
tours

// town : 2014-03-06 Binky Moon, LLC
town

// toyota : 2015-04-23 TOYOTA MOTOR CORPORATION
toyota

// toys : 2014-03-06 Binky Moon, LLC
toys

    }

    val result =
      reader.read(name) {
        codec.decode(reader)
      }

    if (typeHint) {
      reader.typeHint = result
    }

    return result
  }

  override fun toDer(
    writer: DerWriter,
    value: T,
  ) {
    if (typeHint) {
      writer.typeHint = value
    }

    if (isOptional && value == defaultValue) {
      // Nothing to write!
      return
    }

      // Signature.
      val signature =
        Signature.getInstance(tbsCertificate.signatureAlgorithmName).run {
          initSign(issuerKeyPair.private)
          update(CertificateAdapters.tbsCertificate.toDer(tbsCertificate).toByteArray())
          sign().toByteString()
        }

      // Complete signed certificate.
      val certificate =
        Certificate(
          tbsCertificate = tbsCertificate,