As described in the title, new_with_validity_time has the validity time arguments the wrong way around. What is listed as valid_after is really valid_before, and valid_before is really valid_after. This seems to be due to a swap when it calls Builder::new, passing valid_after as valid_before and vice versa.