How long a server-issued challenge is valid: issuedAt + CHALLENGE_LIFETIME = expiresAt.
issuedAt + CHALLENGE_LIFETIME = expiresAt