While I used 24:00 here as that is more our common parlance, 23:59:59 was my original suggestion, and is broadly acceptable as a common stand-in in both technical and legal contexts.

The resulting < vs <= distinction doesn't matter all that much to the broader question of how best to communicate an expiration time to an end-user.