| Previous | Next |
| TRUST_E_MALFORMED_SIGNATURE | TRUST_E_FINANCIAL_CRITERIA |
TRUST_E_BASIC_CONSTRAINTS
TRUST_E_BASIC_CONSTRAINTS means that the Basic Constraints extension is missing or invalid for the role the certificate is playing in the certification path. It commonly appears when an end-entity certificate is treated as a CA or when CA constraints are inconsistent.
Validate CA roles and path rules
- Inspect the Basic Constraints extension on every issuer that is expected to act as a CA.
- Check CA flags, path-length restrictions, and the chain position rather than only the leaf certificate.
- Reissue or replace incorrectly profiled certificates; do not work around the error by trusting an end-entity certificate as a root.
Basic constraints are a structural trust rule, not a cosmetic certificate-field check.
Microsoft: certificate chain policy status
Looking for a different code? Search another status or error code.