One clock (fmt.now_utc) feeds the run date and the day counts of the certificate and the domain, so a sentence such as "vence el 11 de diciembre de 2026, en 58 días" cannot mix two instants. A test ...