Certificate issued for the non-domain member showed as "having invaild digital signature"

[Andrey Smetanin]

Windows Certificate Authority (W2016) has issued certificate for the non domain server(W2016 as well).

When I open certificate file on ANY domain member I can confirm that certificate is totally fine.






If I open THE SAME certificate file on the NON-DOMAIN server, it shows as invalid:





NON domain server has root and intermediate certificates imported in to its local certificate storage.

What could be the reason for this behavior?

Continue reading...