Ignore time validation in UVM endorsements when resolving `didx509` (#5885)

.daily_canary

@@ -1,4 +1,5 @@
    -^-     ___           ___
   (- -)   (= =)   |     Y   &  +--?
  (  V  ) /  .  \  |    +---=---'
-/--x-m- /--n-n---xXx--/--yY------>>>----<<<>>]]{{}}---||-/\---..
+/--x-m- /--n-n---xXx--/--yY------>>>----<<<>>]]{{}}---||-/\---..
+2024

src/node/uvm_endorsements.h

@@ -282,7 +282,11 @@ namespace ccf
 
     const auto& did = phdr.iss;
 
-    auto did_document_str = didx509::resolve(pem_chain, did);
+    auto did_document_str = didx509::resolve(
+      pem_chain,
+      did,
+      true // Ignore time validation (allow expired certs)
+    );
     did::DIDDocument did_document = nlohmann::json::parse(did_document_str);
 
     if (did_document.verification_method.empty())