diff --git a/src/main/java/org/jenkinsci/plugins/oic/OicCredentials.java b/src/main/java/org/jenkinsci/plugins/oic/OicCredentials.java
index 48aaaf0c..843dea50 100644
--- a/src/main/java/org/jenkinsci/plugins/oic/OicCredentials.java
+++ b/src/main/java/org/jenkinsci/plugins/oic/OicCredentials.java
@@ -48,7 +48,7 @@ public OicCredentials(
 
         if (expiresInSeconds != null && expiresInSeconds > 0) {
             long allowedClockSkewFixed = Util.fixNull(allowedClockSkewSeconds, 60L);
-            this.expiresAtMillis = (currentTimestamp + expiresInSeconds + allowedClockSkewFixed) * 1000;
+            this.expiresAtMillis = currentTimestamp + (expiresInSeconds + allowedClockSkewFixed) * 1000;
         } else {
             this.expiresAtMillis = null;
         }