03353027 Issuer is not a certification authority.
Explanation
The issuer of an X.509 certificate or the certificate used to sign a certificate revocation list is not a certification authority. This indicates that the basic constraints certificate extension in the issuer certificate or the certificate used to sign a certificate revocation list does not contain the certification authority indicator.
User response
Report the problem to the issuer of the certificate. If creating a signed certificate revocation list, ensure that a valid certificate authority is specified in the gsk_construct_signed_crl(), gsk_create_signed_crl(), or gsk_create_signed_crl_record() routines.