$OpenBSD: patch-OpenSSL_crypto_py,v 1.1 2015/10/19 11:00:59 sthen Exp $
--- OpenSSL/crypto.py.orig	Mon Oct 19 11:58:55 2015
+++ OpenSSL/crypto.py	Mon Oct 19 11:59:28 2015
@@ -1163,7 +1163,7 @@ class X509(object):
         now = int(time())
         notAfter = _lib.X509_get_notAfter(self._x509)
         return _lib.ASN1_UTCTIME_cmp_time_t(
-            _ffi.cast('ASN1_UTCTIME*', notAfter), now) < 0
+            _ffi.cast('ASN1_UTCTIME*', notAfter), now) == -1
 
 
     def _get_boundary_time(self, which):
