Add support for an accepted timestamp interval signed by the issuer? ie. an expiry time

[brianorwhatever]

What is needed is a way to have a non revocation token (NRT) that expires after a certain amount of time. Could enable offline use cases. Verifying signature of the timestamp might add a small performance hit.