| Previous | Next |
| CERT_E_VALIDITYPERIODNESTING | CERT_E_PATHLENCONST |
CERT_E_ROLE
CERT_E_ROLE means that a certificate permitted only as an end-entity is being used as a certificate authority, or a CA certificate is being used where the policy expects an end-entity. The check protects the intended structure of the chain.
Check the certificate role
- Inspect Basic Constraints and Key Usage on the certificate at the failing chain position.
- Verify that only properly profiled CA certificates issue child certificates in the supplied chain.
- Replace test or incorrectly issued certificates instead of installing them as trusted roots to force validation.
The failure is about the certificate role in the path, not only about whether the certificate name looks correct.
Microsoft: certificate chain policy status
Looking for a different code? Search another status or error code.