033530AA Required basic constraints certificate extension is missing

Explanation

During the certificate validation processing for mode RFC 2459 or ANY, an intermediate CA certificate was encountered outside of a trusted certificate source which does not have a basic constraints extension.

User response

The specified untrusted certificate sources that was passed on either the gsk_validate_certificate_mode() or gsk_validate_certificate() API needs to be examined to determine which intermediate CA certificate is being disallowed. Either the intermediate CA certificate should be replaced with a valid Version 3 certificate or if the usage of the CA certificate is acceptable, the certificate needs to be moved to a trusted certificate source and removed from the untrusted certificate source.

If the error persists after adding the certificates, or if the certificates can not be readily obtained, collect a System SSL trace containing the error and then contact your service representative.