| Previous | Next |
| CERT_E_CRITICAL | CERT_E_ISSUERCHAINING |
CERT_E_PURPOSE
CERT_E_PURPOSE means that the selected policy requires a use that the certificate chain does not authorize. This often involves Enhanced Key Usage, application policy, or an Authenticode or SSL policy applied to a certificate issued for another purpose.
Match certificate usage to the operation
- Inspect Extended Key Usage and application-policy extensions on the leaf and relevant issuer certificates.
- Confirm the caller is applying the intended policy, such as server authentication, client authentication, or code signing.
- Request or issue a certificate for the required purpose instead of repurposing a certificate from another workload.
A chain can be trusted and current yet still be invalid for the particular action being requested.
Microsoft: certificate chain policy status
Looking for a different code? Search another status or error code.