I have a user who keeps causing a "Certificate Verification: Error (26): unsupported certificate purpose" to show up in the SSL error log. My goal is to allow this certificate as I cannot force a change in it. Suggestions? The offending cert is below: X509v3 extensions: X509v3 Key Usage: critical Digital Signature, Non Repudiation X509v3 Certificate Policies: Policy: 2.16.840.1.101.3.2.1.3.7 Policy: 2.16.840.1.101.3.2.1.5.4 X509v3 Extended Key Usage: E-mail Protection, Any Extended Key Usage -----BEGIN CERTIFICATE----- MIIHjDCCBnSgAwIBAgIEUo9cKDANBgkqhkiG9w0BAQsFADCBhzELMAkGA1UEBhMC VVMxGDAWBgNVBAoTD1UuUy4gR292ZXJubWVudDEoMCYGA1UECxMfRGVwYXJ0bWVu dCBvZiBIb21lbGFuZCBTZWN1cml0eTEiMCAGA1UECxMZQ2VydGlmaWNhdGlvbiBB dXRob3JpdGllczEQMA4GA1UECxMHREhTIENBNDAeFw0xNDAxMDYxMzUyMjVaFw0x NzAxMDQwNTAwMDBaMIG4MQswCQYDVQQGEwJVUzEYMBYGA1UEChMPVS5TLiBHb3Zl cm5tZW50MSgwJgYDVQQLEx9EZXBhcnRtZW50IG9mIEhvbWVsYW5kIFNlY3VyaXR5 MQwwCgYDVQQLEwNUU0ExDzANBgNVBAsTBlBlb3BsZTFGMB4GCgmSJomT8ixkAQET EDA1MzA0MDEyMjIuVFNBLjEwJAYDVQQDEx1NSUNIQUVMIE4gWkVJVExJTiAoYWZm aWxpYXRlKTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKjVwF4RyFPw pfv7moo0UmmekvcVe6F2//kgXzPgt8fvuQNG8P8HAuEhMrPMEG33vl+TWZmQYnSj eAjPrTTRTBGUcgRAeCl2IeYvxeq4uOmZsuDuEqv+0DGslDAB9ZiR2RdVq45xZpKC 7YEafj50hcsin+Y9tKYm0FZxc2WVKcpZ4YwipPOvEsnCsGb2/Qywn4hdczu6ZCs0 F8M0gj4PQyUM9mcKy9TCrpRHAOh7SSDHKWl98JcQwxX1odjhzmQQIZpwty2inRN7 UaYPWQe9jWN0RDfB3SndHolhomcwxeQ0FVIg3Ed/+QdOVpUiQwBeL1bI1xNlsLRP OzWQ8jlAhWMCAwEAAaOCA8swggPHMA4GA1UdDwEB/wQEAwIGwDAlBgNVHSAEHjAc MAwGCmCGSAFlAwIBAwcwDAYKYIZIAWUDAgEFBDAZBgNVHSUEEjAQBggrBgEFBQcD BAYEVR0lADCCARsGCCsGAQUFBwEBBIIBDTCCAQkwNAYIKwYBBQUHMAKGKGh0dHA6 Ly9wa2kuZGltYy5kaHMuZ292L2Roc2NhX2VlX2FpYS5wN2MwgaoGCCsGAQUFBzAC hoGdbGRhcDovL2xkYXAwMS5kaW1jLmRocy5nb3Yvb3U9REhTJTIwQ0E0LG91PUNl cnRpZmljYXRpb24lMjBBdXRob3JpdGllcyxvdT1EZXBhcnRtZW50JTIwb2YlMjBI b21lbGFuZCUyMFNlY3VyaXR5LG89VS5TLiUyMEdvdmVybm1lbnQsYz1VUz9jQUNl cnRpZmljYXRlO2JpbmFyeTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGltYy5k aHMuZ292MGIGA1UdEQRbMFmBG21pY2hhZWwuemVpdGxpbkB0c2EuZGhzLmdvdoES MDUzMDQwMTIyMkBkaHMuZ292oCYGCisGAQQBgjcUAgOgGAwWMDUzMDQwMTIyMkBU U0EuREhTLkdPVjCCAZMGA1UdHwSCAYowggGGMIIBV6CCAVOgggFPpIGcMIGZMQsw CQYDVQQGEwJVUzEYMBYGA1UEChMPVS5TLiBHb3Zlcm5tZW50MSgwJgYDVQQLEx9E ZXBhcnRtZW50IG9mIEhvbWVsYW5kIFNlY3VyaXR5MSIwIAYDVQQLExlDZXJ0aWZp Y2F0aW9uIEF1dGhvcml0aWVzMRAwDgYDVQQLEwdESFMgQ0E0MRAwDgYDVQQDEwdD UkwyMjg1hoGtbGRhcDovL2xkYXAwMS5kaW1jLmRocy5nb3YvY249Q1JMMjI4NSxv dT1ESFMlMjBDQTQsb3U9Q2VydGlmaWNhdGlvbiUyMEF1dGhvcml0aWVzLG91PURl cGFydG1lbnQlMjBvZiUyMEhvbWVsYW5kJTIwU2VjdXJpdHksbz1VLlMuJTIwR292 ZXJubWVudCxjPVVTP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3QwKaAnoCWGI2h0 dHA6Ly9wa2kuZGltYy5kaHMuZ292L0RIU19DQTEuY3JsMB8GA1UdIwQYMBaAFPEk MTZYw4w71ennxfYTMiadq9OpMB0GA1UdDgQWBBQOrP8Jf2mirCaEimkB+GP0Eqdt RTAZBgkqhkiG9n0HQQAEDDAKGwRWOC4xAwIEMDANBgkqhkiG9w0BAQsFAAOCAQEA H/wBdUV7WHlu7WkRNNzigL+d5cw3RgFreK7g1/9bv6ajTRj+wmugnK8Vm0x5qhdS YLzNwOJkihj594ewCSweka0ptjijywdDjza2QhWZHn2xT/npCys35NqHovOrpLTs hv1YEZ6MsPou8pjsZvoqWq/5bilyTzp6tpeAeBH8c4Jo3HCHJnoC947UjKigIGNx c9mSJjagowwkh8+9+77ZyiwLgii2JqpcP39qtaq7U/OEc6yCfgNMPeRo22Kl+87C NE+o/iaX4FoYIxQW0mFVW79um6TtfHt+R6iDgh0gNhJ5xBdD/oiPzcPOMrSDl5FT 0GYmFRyuPn0KSMI97oqMPw== -----END CERTIFICATE----- -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx