Check leaf key usage failed in certificate

I have an applet, embedded in a web page, that worked fine (and still works fine) on machines running Java 1.4.2 and below, but throws an exception on machines running version 1.5.0_0x. Specifically, I get the following exception and stack trace:

java.security.cert.CertificateException: Check leaf key usage failed in certificate

at com.sun.deploy.CertUtils.checkUsageForCodeSigning(Unknown source)

...

I'm totally new to signed applets, so I have no clue what "check leaf key usage" is or why it failed in the certificate. I also can't figure out why it didn't fail in 1.4.2 and failed in 1.5.0. Does anybody have some ideas how I can get my applet back up and running?

Thanks.

--Jay

[731 byte] By [kempshalla] at [2007-10-1 13:54:16]
# 1
Check whether the certificate has expired ?
venkyonea at 2007-7-10 17:07:32 > top of Java-index,Security,Signed Applets...
# 2

I am having this same issue. We have an app signed with a root-trusted cert that works fine under J2RE 1.4.2. However, when running under J2SE 5.0 (update 4), it fails with the exact same error message as in the parent post. Does anyone have any more information on what causes this or how to resolve the issue?

Mark_Morgana at 2007-7-10 17:07:32 > top of Java-index,Security,Signed Applets...
# 3

http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=5056088

Your key might not be suited for code signing. Some CA certificates

http://forum.java.sun.com/thread.jspa?threadID=641496&tstart=0

... the X.590v3 extension KeyUsage is only meant for limiting the usage of the certificate to SSL, code-signing, etc. ...

harmmeijera at 2007-7-10 17:07:32 > top of Java-index,Security,Signed Applets...
# 4
Thanks, that is likely the issue. I will request a specific code-signing cert to see if that resolves the problem.
Mark_Morgana at 2007-7-10 17:07:32 > top of Java-index,Security,Signed Applets...
# 5
I am experiencing a similar problem, so I am curious to know if it worked for you with another certification type?
RagnarKa at 2007-7-10 17:07:32 > top of Java-index,Security,Signed Applets...