Certificate validation status.
Namespace:
Rebex.Security.Certificates
Assembly:
Rebex.Common (in Rebex.Common.dll)
Syntax
| Visual Basic |
|---|
<FlagsAttribute> _ Public Enumeration ValidationStatus |
| C# |
|---|
[FlagsAttribute] public enum ValidationStatus |
Members
| Member name | Description | |
|---|---|---|
| TimeNotValid |
This certificate or one of the certificates in the certificate chain is not time valid.
| |
| TimeNotNested |
Certificates in the chain are not properly time nested. Deprecated.
| |
| Revoked |
Trust for this certificate or one of the certificates in the certificate chain has been revoked.
| |
| SignatureNotValid |
The certificate or one of the certificates in the certificate chain does not have a valid signature.
| |
| WrongUsage |
The certificate or certificate chain is not valid for its proposed usage.
| |
| RootNotTrusted |
The certificate or certificate chain is based on an untrusted root.
| |
| UnknownRev |
The revocation status of the certificate or one of the certificates in the certificate chain is unknown.
| |
| CyclicChain |
One of the certificates in the chain was issued by a certification authority that the original certificate had certified.
| |
| InvalidExtension |
One of the certificates has an invalid extension.
| |
| InvalidPolicyConstraints |
The certificate or one of the certificates in the certificate chain has
a policy constraints extension, and one of the issued certificates has
a disallowed policy mapping extension or does not have a required issuance
policies extension.
| |
| InvalidBasicConstraints |
The certificate or one of the certificates in the certificate chain has
a basic constraints extension and either the certificate cannot be used
to issue other certificates or the chain path length has been exceeded.
| |
| InvalidNameConstraints |
The certificate or one of the certificates in the certificate chain has
an invalid name constraints extension.
| |
| UnsupportedNameConstraint |
The certificate or one of the certificates in the certificate chain has a name constraints extension containing unsupported fields.
| |
| NotDefinedNameConstraint |
The certificate or one of the certificates in the certificate chain has a name constraints extension and a name constraint is missing for one of the name choices in the end certificate.
| |
| NotPermittedNameConstraint |
The certificate or one of the certificates in the certificate chain has a name constraints extension and there is not a permitted name constraint for one of the name choices in the end certificate.
| |
| ExcludedNameConstraint |
The certificate or one of the certificates in the certificate chain has a name constraints extension and one of the name choices in the end certificate is explicitly excluded.
| |
| IncompleteChain |
The certificate chain is not complete.
| |
| CtlTimeNotValid |
A CTL used to create this chain was not time valid.
| |
| CtlSignatureNotValid |
A CTL used to create this chain did not have a valid signature.
| |
| CtlWrongUsage |
A CTL used to create this chain is not valid for this usage.
| |
| OfflineRev |
The revocation status of the certificate or one of the certificates in the certificate chain is either off-line or stale.
| |
| NoIssuanceChainPolicy |
The end certificate does not have any resultant issuance policies, and one of the issuing CA certificates has a policy constraints extension requiring it.
| |
| UnsupportedSignatureAlgorithm |
The certificate chain contains a certificate with unsupported signature hash algorithm (usually SHA-2) or unsupported key algorithm (usually ECDSA).
| |
| UnknownError |
Unknown error.
| |
| PathTooLong |
A path length constraint in the certification chain has been violated.
| |
| UnknownCriticalExtension |
A certificate contains an unknown extension that is marked critical.
| |
| InvalidChain |
A certificate chain is invalid,
such as an certificate's Issuer not matching the CA's Subject or
an certificate's AKI not matching the CA's SKI.
| |
| UnknownCa | Obsolete. | |
| CnNotMatch |
The certificate's CN name does not match the passed value.
| |
| CaNotTrusted | Obsolete. | |
| ExplicitDistrust |
The certificate was explicitly marked as untrusted by the user or CA.
| |
| Malformed |
A certificate or CRL is malformed.
| |
| MoreErrors |
There might be more errors apart from those reported.
| |
| WeakAlgorithm |
Certificate uses algorithm which is not considered secure on this platform.
| |
| NotTrusted |
Certificate is not trusted.
|