| Previous | Next |
| CERT_E_CN_NO_MATCH | TRUST_E_EXPLICIT_DISTRUST |
CERT_E_WRONG_USAGE
CERT_E_WRONG_USAGE means that the certificate does not authorize the usage required by the active policy. This can arise when a certificate intended for one role is used for another, such as using a client-authentication certificate for server authentication or code signing.
Check EKU and policy selection
- Inspect Extended Key Usage, Key Usage, and application-policy extensions on the certificate chain.
- Confirm the caller selected the right verification policy for the operation.
- Obtain a certificate issued for the necessary usage instead of weakening the policy check.
This is a declared capability mismatch, even when the certificate signature and root trust are otherwise valid.
Microsoft: certificate chain policy status
Looking for a different code? Search another status or error code.