remove timezone info from credential expiration before validating