Comment # 2 on bug 1208478 from Joan Torres

That is a self-signed certificate generated to sign the .jar file and is
necessary to enable some functionality on the java vncviewer.

These certificates have a validity period, and it looks like that is the
timestamp you see.

Because of how the certificate is generated, each time it is built, the
validity of the cert is changed from the current build date until 20 years.

I think I can change the current date to a specific date i.e. make the validity
period from e.g. 01-01-2023 to 01-01-2043. I think that would make the same
timestamp from the cert always.

Would that make tigervnc reproducibly?

Apart from this certificate, the java client also has other timestamps to tell
when it was built, I could change that too, that's more trivial.