Validity period (Not Before / Not After)

What it means

The window in which the certificate may be used. Outside it, every client rejects the certificate outright.

Why it matters

Expiry is the single most common certificate failure in production. Note: a PC with a wrong system clock can see a perfectly good certificate as 'not yet valid' or 'expired'.