Why living in the future is bad when you're a CA server (aka the story of 0x800b0101 CERT_E_EXPIRED)

I worked on the following case recently: We can't seem to enroll for certificates from our Windows 2008 OCS Servers, the error we get is "A required certificate is not within its validity period when verifying against the current system clock or the...(read more)