| Previous | Next |
| CERT_E_REVOCATION_FAILURE | CERT_E_WRONG_USAGE |
CERT_E_CN_NO_MATCH
CERT_E_CN_NO_MATCH means that the certificate name checked by the SSL policy does not match the identity supplied by the caller. It is an endpoint-identity failure, not a network-connectivity or general chain-building result.
Verify the requested identity
- Record the exact DNS name or other identity passed to the verification API and the certificate names presented by the server.
- Check that the client connects using the intended host name rather than an IP address, alias, or stale redirect target.
- Reissue or deploy a certificate whose approved names cover the service identity; do not ignore name verification for production endpoints.
A trusted and unexpired certificate can still fail when it is presented for the wrong service name.
Microsoft: certificate chain policy status
Looking for a different code? Search another status or error code.