We found a case in openssl's oscp extension which requires times in the OSCP response to be encoded as GeneralizedTimes. Anyone have experience cajoling encoding/asn1 to marshal to GeneralizedTime instead of UTCTime?We're currently thinking we need to marshal the bytes ourselves and put them into the oscp response struct as a RawValue.