XML Schema only allows hh:mm timezone offsets.
Of COURSE we care about X509, else why also those X509Data elements. I
don't know if that's compelling enough reason to avoid NotOnOrAfter or
not.
Subsecond resolution bothers me because XML Schema is silent on the
matter of roundoff errors, etc., between lexical form and native form,
and back. See archives for discussion of "round-tripping," e.g. If we
need subsecond, then let's say msec and allow .000 only.
--
Zolera Systems, Securing web services (XML, SOAP, Signatures,
Encryption)
http://www.zolera.com
