Treat expiration times as unsigned numbers and prevent overflows

Convert the expiration times from time_t to an unsigned 32-bit number,
and take care that the lower and upper bounds of the checked range for
the expiration date do not overflow.