| Previous | Next |
| CERT_E_ROLE | CERT_E_CRITICAL |
CERT_E_PATHLENCONST
CERT_E_PATHLENCONST means that a CA certificate limited the number of subordinate CA certificates below it, and the supplied certification path exceeds that limit. End-entity certificates are not counted in the same way as additional CAs.
Reduce the CA path or reissue it
- Inspect the pathLenConstraint value on each CA certificate in the chain.
- Count the subordinate CA certificates beneath the constrained CA in the actual path selected by Windows.
- Use the intended intermediate chain or reissue the PKI hierarchy with a path-length policy that matches the design.
Adding more intermediates will not fix this result; it normally makes the violated constraint worse.
Microsoft: certificate and trust return values
Looking for a different code? Search another status or error code.