AWS does not currently provide a public timestamp server. Use a third-party timestamp authority (TSA), such as:
http://timestamp.digicert.com
http://timestamp.sectigo.com
Time stamping ensures the digital signature remains valid even after certificate expiration.
