| Previous | Next |
| CERT_E_EXPIRED | CERT_E_ROLE |
CERT_E_VALIDITYPERIODNESTING
CERT_E_VALIDITYPERIODNESTING means that the validity dates in the certification path do not nest correctly. A child certificate should not remain valid outside the interval in which its issuing CA certificate is valid.
Inspect issuance dates across the chain
- Compare NotBefore and NotAfter for each child certificate with the issuer immediately above it.
- Check certificate-renewal and issuing-CA configuration for incorrect date templates or manually selected validity periods.
- Reissue the affected certificate chain with a valid hierarchy rather than attempting to hide the policy error.
This is a PKI issuance problem and is not fixed by changing the client clock once the certificate dates themselves are inconsistent.
Microsoft: certificate chain policy status
Looking for a different code? Search another status or error code.