@@ -2645,13 +2645,12 @@ The certificate is not yet valid: the notBefore date is after the current time.
2645
2645
<a id =" CERT_HAS_EXPIRED " ></a >
2646
2646
#### ` CERT_HAS_EXPIRED `
2647
2647
2648
- The certificate has expired: that is the notAfter date is before the current
2649
- time.
2648
+ The certificate has expired: the notAfter date is before the current time.
2650
2649
2651
2650
<a id =" CRL_NOT_YET_VALID " ></a >
2652
2651
#### ` CRL_NOT_YET_VALID `
2653
2652
2654
- The revocation data have a future issue date.
2653
+ The certificate revocation list (CRL) has a future issue date.
2655
2654
2656
2655
<a id =" CRL_HAS_EXPIRED " ></a >
2657
2656
#### ` CRL_HAS_EXPIRED `
@@ -2693,7 +2692,7 @@ included in the trusted certificate list.
2693
2692
<a id =" CERT_CHAIN_TOO_LONG " ></a >
2694
2693
#### ` CERT_CHAIN_TOO_LONG `
2695
2694
2696
- The certificate chain length is greater than the supplied maximum depth.
2695
+ The certificate chain length is greater than the maximum depth.
2697
2696
2698
2697
<a id =" UNABLE_TO_GET_CRL " ></a >
2699
2698
#### ` UNABLE_TO_GET_CRL `
@@ -2718,9 +2717,8 @@ purpose.
2718
2717
<a id =" INVALID_CA " ></a >
2719
2718
#### ` INVALID_CA `
2720
2719
2721
- The certificate’s signer was not a CA. This may happen if this was a version 1
2722
- certificate, which is common with some CAs, or a version 3 certificate without
2723
- the basic constrains extension.
2720
+ A CA certificate is invalid. Either it is not a CA or its extensions are not
2721
+ consistent with the supplied purpose.
2724
2722
2725
2723
<a id =" PATH_LENGTH_EXCEEDED " ></a >
2726
2724
#### ` PATH_LENGTH_EXCEEDED `
0 commit comments