ErrorFindly
0x80096004SystemHigh

Error 0x80096004 — Certificate Signature (TRUST_E_CERT_SIGNATURE) | Windows System Error Fix

Windows 11Windows 10Windows Server 2022

What Does 0x80096004 Mean?

The signature of the certificate can not be verified. The certificate's digital signature is invalid.

Real-World Causes

  1. 1Certificate was tampered with or corrupted
  2. 2Signing algorithm is not supported by the system
  3. 3Certificate file was damaged during transfer
  4. 4Man-in-the-middle attack modifying the certificate

Symptoms

  • ⚠Certificate verification fails
  • ⚠Software installation rejects the signature
  • ⚠Windows Update fails signature validation
  • ⚠Code signing checks fail

DIY Fix

Beginner-friendly steps you can try at home

  1. 1Re-download the file or certificate from the official source
  2. 2Update Windows to get latest crypto algorithm support
  3. 3Check system time is correct
  4. 4Run Windows Update to update root certificates

Advanced Fix

For experienced users and IT professionals

  1. 1Verify the certificate manually: 'certutil -verify certificate.cer'
  2. 2Check if the signing algorithm is supported: SHA-1 signed certificates may be rejected on newer systems
  3. 3Update crypto providers if older algorithms need support

Frequently Asked Questions

Why are SHA-1 certificates rejected?
SHA-1 is considered cryptographically weak and can be forged. Microsoft and other vendors have deprecated SHA-1 for code signing and TLS certificates. Files must be signed with SHA-256 or stronger. If you have SHA-1 signed software, contact the vendor for an updated version.

Related Error Codes

0x800B0100No Signature (TRUST_E_NOSIGNATURE)0x800B0109Untrusted Root (CERT_E_UNTRUSTEDROOT)

About the Author

Windows Troubleshooting Team

Verified against official Microsoft documentation and real-world diagnostic data. Error behavior confirmed across Windows 10, Windows 11, and Windows Server.