Help with new dwInfoStatus values..

From: msnews.microsoft.com (ptronnie_at_hotmail.com)
Date: 10/30/03 

Date: Thu, 30 Oct 2003 13:45:15 -0500

Greetings,

I did not get a reply from the microsoft.public.platformsdk.security
newsgroup so I thought I would try here.

I am familiar with previous dsInfoStatus values like the ones listed below
and know what causes them:
#define CERT_TRUST_HAS_EXACT_MATCH_ISSUER 0x00000001
#define CERT_TRUST_HAS_KEY_MATCH_ISSUER 0x00000002
#define CERT_TRUST_HAS_NAME_MATCH_ISSUER 0x00000004
#define CERT_TRUST_IS_SELF_SIGNED 0x00000008

However, nowhere can I find out information of the following dsInfoStatus
values and what would cause them (i.e. Many of the CA and Root certs in my
browser show up as "CERT_TRUST_HAS_PREFERRED_ISSUER". What exactly is that?.

#define CERT_TRUST_HAS_PREFERRED_ISSUER 0x00000100
#define CERT_TRUST_HAS_ISSUANCE_CHAIN_POLICY 0x00000200
#define CERT_TRUST_HAS_VALID_NAME_CONSTRAINTS 0x00000400
#define CERT_TRUST_IS_COMPLEX_CHAIN 0x00010000

Note: These values were taken from the latest wincrypt.h file.

Thanks for any assistance.

Sincerely,

Patrick