Certificates issued one hour too early?

[_az]

@rgj

Is this by design?

Yes, certificates are backdated intentionally, to avoid issues with clock skew. (Though it does not solve all clock skew problems e.g. OCSP responses are not backdated.)