The CRL validation code should permit some clock skew when checking the validity
of CRLs. Currently, the system clock and the CRL server's clock have to be exactly synchronized or the validity check may fail if the system's clock is skewed such that it
is either before the CRL's this update field or after the CRL's next update field.
Posted Date : 2008-12-19 19:31:22.0

N/A

Increased the allowable OCSP and CRL validity check clock skew to 15 minutes.
Posted Date : 2009-02-20 15:56:18.0