Time-bounded windows during which previously-issued certificates can be invalidated or recalled without waiting for expiration.