--- /usr/lib/python3/dist-packages/saml2/validate.py	2017-10-11 21:44:34.000000000 +0200
+++ /usr/lib/python3/dist-packages/saml2/validate.py	2025-07-29 17:16:15.204622067 +0200
@@ -91,7 +91,7 @@
         now = time_util.utc_now()
         nooa = calendar.timegm(time_util.str_to_time(not_on_or_after))
         if now > nooa + slack:
-            now_str=time.strftime('%Y-%M-%dT%H:%M:%SZ', time.gmtime(now))
+            now_str=time.strftime('%Y-%m-%dT%H:%M:%SZ', time.gmtime(now))
             raise ResponseLifetimeExceed(
                 "Can't use repsonse, too old (now=%s + slack=%d > " \
                 "not_on_or_after=%s" % (now_str, slack, not_on_or_after))
@@ -105,7 +105,7 @@
         now = time_util.utc_now()
         nbefore = calendar.timegm(time_util.str_to_time(not_before))
         if nbefore > now + slack:
-            now_str = time.strftime('%Y-%M-%dT%H:%M:%SZ', time.gmtime(now))
+            now_str = time.strftime('%Y-%m-%dT%H:%M:%SZ', time.gmtime(now))
             raise ToEarly("Can't use response yet: (now=%s + slack=%d) "
                           "<= notbefore=%s" % (now_str, slack, not_before))
     return True