Mixed and By-Policy States

The Certificate Global State is determined by whether certificates are approved or banned and whether the publisher policy is approved or banned.

The table Determining Certificate Global State shows that the Certificate Global State can be Mixed, Approved by Policy, or Banned by Policy in certain cases. The following general rules apply for determining the state:

• Mixed Path State – Certificate Path State is considered Mixed when some certificates are Approved and some are Banned. The Mixed state for path is strictly informational, however. In terms of its contribution to Certificate Global State, a Mixed path is equivalent to a Banned path.
• By Policy Publisher State – When a Publisher State is Banned by Policy or Approved by Policy, any ban or approval on a certificate in the path is filtered through the publisher policy choices. For example, if a certificate is Banned and it’s publisher is Approved by Policy, the Certificate Global Policy is Mixed.