| Previous | Next |
| CERT_E_PATHLENCONST | CERT_E_PURPOSE |
CERT_E_CRITICAL
CERT_E_CRITICAL means that certificate validation encountered a critical extension it does not recognize or cannot process. A critical extension must be understood by a relying party before the certificate can be safely accepted.
Inspect the extension, not just the issuer
- Identify the extension OID and the certificate that contains it.
- Check whether the target Windows version and trust provider support that extension and profile.
- Reissue the certificate without an inappropriate critical marking only when the extension is optional for the intended policy.
Ignoring an unknown critical extension defeats the purpose of marking that extension critical.
Microsoft: certificate and trust return values
Looking for a different code? Search another status or error code.