diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/Constants.cs b/src/Microsoft.Identity.Web.TokenAcquisition/Constants.cs
index b2b0ce69a..9734ee86a 100644
--- a/src/Microsoft.Identity.Web.TokenAcquisition/Constants.cs
+++ b/src/Microsoft.Identity.Web.TokenAcquisition/Constants.cs
@@ -130,6 +130,7 @@ public static class Constants
         internal const string InvalidKeyError = "AADSTS700027";
         internal const string SignedAssertionInvalidTimeRange = "AADSTS700024";
         internal const string CertificateHasBeenRevoked = "AADSTS7000214";
+        internal const string CertificateIsOutsideValidityWindow = "AADSTS1000502";
         internal const string CiamAuthoritySuffix = ".ciamlogin.com";
         internal const string TestSlice = "dc";
 
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/TokenAcquisition.cs b/src/Microsoft.Identity.Web.TokenAcquisition/TokenAcquisition.cs
index 6c27bc863..03d7ae530 100644
--- a/src/Microsoft.Identity.Web.TokenAcquisition/TokenAcquisition.cs
+++ b/src/Microsoft.Identity.Web.TokenAcquisition/TokenAcquisition.cs
@@ -585,11 +585,13 @@ private bool IsInvalidClientCertificateOrSignedAssertionError(MsalServiceExcepti
 #if !NETSTANDARD2_0 && !NET462 && !NET472
                 (exMsal.Message.Contains(Constants.InvalidKeyError, StringComparison.OrdinalIgnoreCase)
                 || exMsal.Message.Contains(Constants.SignedAssertionInvalidTimeRange, StringComparison.OrdinalIgnoreCase)
-                || exMsal.Message.Contains(Constants.CertificateHasBeenRevoked, StringComparison.OrdinalIgnoreCase));
+                || exMsal.Message.Contains(Constants.CertificateHasBeenRevoked, StringComparison.OrdinalIgnoreCase)
+                || exMsal.Message.Contains(Constants.CertificateIsOutsideValidityWindow, StringComparison.OrdinalIgnoreCase));
 #else
                 (exMsal.Message.Contains(Constants.InvalidKeyError) 
                 || exMsal.Message.Contains(Constants.SignedAssertionInvalidTimeRange) 
-                || exMsal.Message.Contains(Constants.CertificateHasBeenRevoked));
+                || exMsal.Message.Contains(Constants.CertificateHasBeenRevoked)
+                || exMsal.Message.Contains(Constants.CertificateIsOutsideValidityWindow));
 #endif
         }