Thomas, > Since the failure of checking certificate chain correctly seems to be > buried deeper in windows (maybe in some DLL? some info from > microsoft would be greatly appreciated [...] The CryptoAPI function CertVerifyCertificateChainPolicy() could be an interesting starting point. However, I get the feeling it is more a matter of similar errors being made by different people in different development teams. Best regards, Torbjörn Hovmark ______________________________________ Abtrusion Security AB http://www.abtrusion.com