x509af_notafter and x509af_notbefore yielding vague data

[sampatti37]

When analyzing a PCAP with a TLS certificate, you are not able to access the Not Before and Not After time of the cert. You have two options according to the methods for a cert which are:

packet.tls.x509af_notbefore/packet.tls.x509af_notafter

OR

packet.tls.x509af_validity_element

The first option provides '0' for both which is the value corresponding to the time being in utc time.
The second option yields the string 'validity'.

The only option I have found is packet.tls.x509af_utctime but this only yields the Not Before time, still leaving the Not After time unable to be accessed.