Unverified50% confidenceCautionExact time
If the SP side refreshes metadata only after the old certificate expires, or if the metadata cache is not invalidated in time, AD FS signature verification will fail.
1
Sources
50%
Confidence
Long-term
Relevance
11/4/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedName entry errors are difficult to remedy, because examination bodies typically do not accept name change requests after certificates have been printed and archives filed, and spelling errors may cause discrepancies between certificates and identity documents.59% similarUnverifiedVerifying a record is not equivalent to verifying correctness; a verified receipt only proves that the saved result has not been altered since it was saved.58% similarUnverified部分应用实施SSL Pinning机制拒绝非预期CA签发的证书，研究者需借助Frida等动态插桩工具绕过该保护56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1134565API
curl https://kongchang.com/api/v1/knowledge/claims/1134565MCP
get_claim(id=1134565)