| Previous | Next |
| TRUST_E_NOSIGNATURE | CERT_E_VALIDITYPERIODNESTING |
CERT_E_EXPIRED
CERT_E_EXPIRED means that a certificate needed by the selected policy is not valid at the time used for verification. That time can be the current system clock or, for a signed file, a timestamp considered by the policy.
Check time before replacing certificates
- Verify the system clock, time zone, and time synchronization first.
- Inspect NotBefore and NotAfter for the leaf and every required issuer certificate.
- For signed files, inspect the timestamp evidence and the policy that determines whether historical validation is allowed.
A leaf certificate may be current while an intermediate or timestamp certificate is the actual expired element.
Microsoft: certificate chain policy status
Looking for a different code? Search another status or error code.