27.4 Certificate lifetime restrictions

You can set up a credential profile to restrict the lifetime of certificates to the vetting date.

If you set the Constrain certificate lifetime to vetting date option on the credential profile, when certificates are issued to this device, their expiry date will not exceed the vetting date of the recipient, regardless of the expiry date of the device.

See the Issuance Settings section.