03353073 Cannot match CRL distribution points.
Explanation
The DN in the Issuing Distribution Point extension
of the CRL does not match a suitable DN in the certificate undergoing
validation. The DN in the Issuing Distribution Point extension must
match either:
- A DN of type fullName in the Distribution Point of the CRL Distribution Points extension of the certificate undergoing validation
- The CRLIssuer field in the Distribution Point of the CRL Distribution Points extension of the certificate undergoing validation
- The Certificate Issuer name, if no CRL Distribution Point extension exists in the certificate undergoing validation
User response
Ensure that the certificate chain is correct and complies with the validation mode defined for the connection. Collect a System SSL trace containing the error and then contact your service representative if the error persists.