diff --git a/tests/kdc/check-bx509.in b/tests/kdc/check-bx509.in
index 83faf09ba..0c61a20d0 100644
--- a/tests/kdc/check-bx509.in
+++ b/tests/kdc/check-bx509.in
@@ -640,10 +640,10 @@ ${kgetcred} -H HTTP/${server}@${R} ||
     { echo "Fetched TGT didn't work"; exit 2; }
 if which jq >/dev/null; then
     if ! ${klistjson} | jq -e '
-        (.tickets[0].Issued | strptime("%b %e %H:%M:%S %Y")|mktime) as $iat
+        (.tickets[0].Issued  | strptime("%b %e %H:%M:%S %Y")|mktime) as $iat
       | (.tickets[0].Expires | strptime("%b %e %H:%M:%S %Y")|mktime) as $exp
       | (($exp - $iat) / 86400) as $life_days
-      | ($life_days > 4 and $life_days < 5)'; then
+      | ($life_days > 4 and $life_days <= 5)'; then
         echo "Incorrect lifetime"
         exit 2
     fi