http://bugs.winehq.org/show_bug.cgi?id=26527
--- Comment #20 from Juan Lang juan_lang@yahoo.com 2011-04-08 10:49:48 CDT --- The trouble with revocation is that the CA certificate used, "Certum Level III", doesn't contain any way to check it for revocation, so the revocation checking code reports that. That's currently treated as a failure. More tests are needed to determine the right thing to do.
For example, it could be that revocation checking should fail, but that the chain checking code shouldn't treat that as a failure. It could also be that lack of a way to check revocation is not treated as a failure for an intermediate certificate, but is for an end certificate.