Refer to the exhibit.
What is the purpose of the “Clock Skew Allowance” setting?
Clock skew allowance pre-dates and post-dates the validity window of a client certificate by the configured number of minutes. It therefore sets the certificate start time a few minutes before the current time and extends the certificate expiry time by a few minutes beyond the normal validity period.
Community Discussion