diff --git a/src/crypto/x509/verify.go b/src/crypto/x509/verify.go index cb6479f345..0b01f8b475 100644 --- a/src/crypto/x509/verify.go +++ b/src/crypto/x509/verify.go @@ -925,6 +925,10 @@ func (c *Certificate) buildChains(currentChain []*Certificate, sigChecks *int, o err = candidate.isValid(certType, currentChain, opts) if err != nil { + if hintErr == nil { + hintErr = err + hintCert = candidate + } return }