For critical infrastructure, in addtion to Issue #42, a trusted validity period is also required

[henkbirkholz]

The obvious way forward to add this, is a paragraph about the em Claim use that expressed the validity period of an EAR.

[thomas-fossati]

👍 and thanks for raising a separate issue from #42 -- it needs to be treated independently.