A certificate check is forced once the timeout is reached even if the system time appears to be invalid.
Some options are still missing descriptions though.