Integrated SSL Scanning
Page 5 Finjan proprietary and confidential
Field Description
Unable to get local issuer certificate The issuer certificate of a locally
looked-up certificate could not
be found. This normally means
the list of trusted certificates is
not complete.
Unable to verify the first certificate No signatures could be verified
because the chain contains only
one certificate, and it is not self-
signed.
Certificate chain too long The certificate chain length is
greater than the supplied
maximum depth.
Invalid CA certificate Either the certificate is not a CA
or its extensions are not
consistent with the supplied
purpose.
Certificate not trusted The root CA is not marked as
trusted for the specified
purpose.
Certificate rejected The root CA is marked to reject
the specified purpose.
Subject issuer mismatch The current candidate issuer
certificate was rejected because
its subject name did not match
the issuer name of the current
certificate.
Authority and subject key identifier mismatch The current candidate issuer
certificate was rejected because
its subject key identifier was
present and did not match the
authority key identifier of the
current certificate.
Authority and issuer serial number mismatch The current candidate issuer
certificate was rejected because
its issuer name and serial
number was present and did not
match the authority key identifier
of the current certificate.
Key usage does not include certificate
signing
The current candidate issuer
certificate was rejected because
its keyUsage extension did not
permit certificate signing.