| Previous | Next |
| CERT_E_PURPOSE | CERT_E_MALFORMED |
CERT_E_ISSUERCHAINING
CERT_E_ISSUERCHAINING means that the parent selected for a certificate does not form a valid issuer relationship with that child. Matching display names alone are not enough; the certificate chain must be cryptographically and structurally consistent.
Rebuild the chain from verified issuers
- Compare the child issuer with the proposed parent subject and inspect authority-key and subject-key identifiers where present.
- Verify the child certificate signature with the proposed issuer public key.
- Remove substituted or duplicate intermediates and supply the correct issuing chain from the certificate authority.
Installing a certificate with a similar name does not repair an issuer mismatch.
Microsoft: certificate and trust return values
Looking for a different code? Search another status or error code.