| Previous | Next |
| TRUST_E_COUNTER_SIGNER | TRUST_E_TIME_STAMP |
TRUST_E_CERT_SIGNATURE
TRUST_E_CERT_SIGNATURE means that Windows could not verify a certificate signature with the issuer certificate selected for that chain element. The problem can be a damaged certificate, a mismatched issuer, or an invalid chain construction.
Inspect the failing chain element
- Record the certificate subject, issuer, serial number, thumbprint, and the chain element index reported by the policy API.
- Check that the intended issuer certificate is present and has the public key needed to verify the child certificate.
- Rebuild the chain from the supplied intermediates and trusted roots instead of adding an unrelated certificate to a trust store.
This is a certificate-signature failure, so fixing only hostname matching or expiration will not resolve it.
Microsoft: certificate chain policy status
Looking for a different code? Search another status or error code.