Certificate validation status.
Namespace:
Rebex.Security.Certificates
Assembly:
Rebex.Common (in Rebex.Common.dll)
Syntax
Visual Basic |
---|
<FlagsAttribute> _ Public Enumeration ValidationStatus |
C# |
---|
[FlagsAttribute] public enum ValidationStatus |
Members
Member name | Description | |
---|---|---|
TimeNotValid |
This certificate or one of the certificates in the certificate chain is not time valid.
| |
TimeNotNested |
Certificates in the chain are not properly time nested. Deprecated.
| |
Revoked |
Trust for this certificate or one of the certificates in the certificate chain has been revoked.
| |
SignatureNotValid |
The certificate or one of the certificates in the certificate chain does not have a valid signature.
| |
WrongUsage |
The certificate or certificate chain is not valid for its proposed usage.
| |
RootNotTrusted |
The certificate or certificate chain is based on an untrusted root.
| |
UnknownRev |
The revocation status of the certificate or one of the certificates in the certificate chain is unknown.
| |
CyclicChain |
One of the certificates in the chain was issued by a certification authority that the original certificate had certified.
| |
InvalidExtension |
One of the certificates has an invalid extension.
| |
InvalidPolicyConstraints |
The certificate or one of the certificates in the certificate chain has
a policy constraints extension, and one of the issued certificates has
a disallowed policy mapping extension or does not have a required issuance
policies extension.
| |
InvalidBasicConstraints |
The certificate or one of the certificates in the certificate chain has
a basic constraints extension and either the certificate cannot be used
to issue other certificates or the chain path length has been exceeded.
| |
InvalidNameConstraints |
The certificate or one of the certificates in the certificate chain has
an invalid name constraints extension.
| |
UnsupportedNameConstraint |
The certificate or one of the certificates in the certificate chain has a name constraints extension containing unsupported fields.
| |
NotDefinedNameConstraint |
The certificate or one of the certificates in the certificate chain has a name constraints extension and a name constraint is missing for one of the name choices in the end certificate.
| |
NotPermittedNameConstraint |
The certificate or one of the certificates in the certificate chain has a name constraints extension and there is not a permitted name constraint for one of the name choices in the end certificate.
| |
ExcludedNameConstraint |
The certificate or one of the certificates in the certificate chain has a name constraints extension and one of the name choices in the end certificate is explicitly excluded.
| |
IncompleteChain |
The certificate chain is not complete.
| |
CtlTimeNotValid |
A CTL used to create this chain was not time valid.
| |
CtlSignatureNotValid |
A CTL used to create this chain did not have a valid signature.
| |
CtlWrongUsage |
A CTL used to create this chain is not valid for this usage.
| |
OfflineRev |
The revocation status of the certificate or one of the certificates in the certificate chain is either off-line or stale.
| |
NoIssuanceChainPolicy |
The end certificate does not have any resultant issuance policies, and one of the issuing CA certificates has a policy constraints extension requiring it.
| |
UnsupportedSignatureAlgorithm |
The certificate chain contains a certificate with unsupported signature hash algorithm (usually SHA-2) or unsupported key algorithm (usually ECDSA).
| |
UnknownError |
Unknown error.
| |
PathTooLong |
A path length constraint in the certification chain has been violated.
| |
UnknownCriticalExtension |
A certificate contains an unknown extension that is marked critical.
| |
InvalidChain |
A certificate chain is invalid,
such as an certificate's Issuer not matching the CA's Subject or
an certificate's AKI not matching the CA's SKI.
| |
UnknownCa | Obsolete. | |
CnNotMatch |
The certificate's CN name does not match the passed value.
| |
CaNotTrusted | Obsolete. | |
ExplicitDistrust |
The certificate was explicitly marked as untrusted by the user or CA.
| |
Malformed |
A certificate or CRL is malformed.
| |
MoreErrors |
There might be more errors apart from those reported.
| |
WeakAlgorithm |
Certificate uses algorithm which is not considered secure on this platform.
| |
NotTrusted |
Certificate is not trusted.
|