My Oracle Support Banner

ValidateCertChain Command Gives Error "CA cert not marked with critical BasicConstraint indicating it is a CA" (Doc ID 2880342.1)

Last updated on JUNE 30, 2022

Applies to:

Oracle WebLogic Server - Version 12.2.1.4.0 and later
Information in this document applies to any platform.

Symptoms

 ValidateCertChain command fails with below error:

$ java utils.ValidateCertChain -jks ca_cert keystore.jks
Cert[0]: CN=*.company.com,O=Company name Ltd,L=Location,ST=SG,C=SG
CA cert not marked with critical BasicConstraint indicating it is a CA
Certificate chain is invalid

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.