Integrated SSL Scanning
Page 5 Finjan proprietary and confidential
Unable to get local issuer certificate
The issuer certificate of a locally
looked up certificate could not
be found. This normally means
the list of trusted certificates is
not complete.
Unable to verify the first certificate
No signatures could be verified
because the chain contains only
one certificate and it is not self
signed.
Certificate chain too long
The certificate chain length is
greater than the supplied
maximum depth.
Either it is not a CA or its
extensions are not consistent
with the supplied purpose.
The root CA is not marked as
trusted for the specified
purpose.
The root CA is marked to reject
the specified purpose.
The current candidate issuer
certificate was rejected because
its subject name did not match
the issuer name of the current
certificate.
Authority and subject key identifier mismatch
The current candidate issuer
certificate was rejected because
its subject key identifier was
present and did not match the
authority key identifier current
certificate.
Authority and issuer serial number mismatch
The current candidate issuer
certificate was rejected because
its issuer name and serial
number was present and did not
match the authority key identifier
of the current certificate.
Key usage does not include certificate
signing
The current candidate issuer
certificate was rejected because
its keyUsage extension does not
permit certificate signing.