| Previous | Next |
| CRYPT_E_NO_PROVIDER | CRYPT_E_DELETED_PREV |
CRYPT_E_SELF_SIGNED
The certificate being processed is self-signed. A self-signed certificate is not automatically invalid, but it is not trusted for a particular purpose unless the applicable chain and policy trust it.
What to check
- Determine whether the certificate is intentionally a trust anchor or unexpectedly presented as an end-entity certificate.
- Build the certificate chain and evaluate the relevant policy instead of treating the self-signed status alone as a final decision.
- Install trust only through the organization’s approved trust-distribution process.
Microsoft: CertGetCertificateChain
Microsoft: CertVerifyCertificateChainPolicy
Looking for a different code? Search another status or error code.