int CertVerifier::CheckCertChain(const PCCERT_CONTEXT cert, HCERTSTORE hFileStore, FILETIME time) {

	HCERTCHAINENGINE         hChainEngine;
	CERT_CHAIN_ENGINE_CONFIG ChainConfig;
	PCCERT_CHAIN_CONTEXT     pChainContext;
	PCCERT_CHAIN_CONTEXT     pDupContext;
	CERT_ENHKEY_USAGE        EnhkeyUsage;
	CERT_USAGE_MATCH         CertUsage;  
	CERT_CHAIN_PARA          ChainPara;
	DWORD                    dwFlags=CERT_CHAIN_REVOCATION_CHECK_CHAIN | CERT_CHAIN_TIMESTAMP_TIME;

	EnhkeyUsage.cUsageIdentifier = 0;
	EnhkeyUsage.rgpszUsageIdentifier=NULL;
	CertUsage.dwType = USAGE_MATCH_TYPE_AND;
	CertUsage.Usage  = EnhkeyUsage;
	ChainPara.cbSize = sizeof(CERT_CHAIN_PARA);
	ChainPara.RequestedUsage=CertUsage;

	memset(&ChainConfig, 0, sizeof(ChainConfig));
	ChainConfig.cbSize = sizeof(CERT_CHAIN_ENGINE_CONFIG);
	ChainConfig.dwFlags = CERT_CHAIN_CACHE_END_CERT|CERT_CHAIN_USE_LOCAL_MACHINE_STORE;
	ChainConfig.hExclusiveRoot = hFileStore;
	ChainConfig.hExclusiveTrustedPeople = hFileStore;

	if(!CertCreateCertificateChainEngine(&ChainConfig, &hChainEngine)) {
		LOG4CPLUS_WARN(m_pLog->getLogger(), m_pLog->getLoggerMsg("The engine creation function failed. Error: %x\n", GetLastError()));
		return ERR_CERT_CHAIN;
	}


	if(!CertGetCertificateChain(
		hChainEngine,          // use the default chain engine
		cert,				   // pointer to the end certificate
		&time,                  // use time
		//hFileStore,            // search additional stores
		NULL,            // search additional stores
		&ChainPara,            // use AND logic and enhanced key usage 
                               //  as indicated in the ChainPara 
                               //  data structure
		dwFlags,
		NULL,                  // currently reserved
		&pChainContext))       // return a pointer to the chain created
	{        
		LOG4CPLUS_WARN(m_pLog->getLogger(), m_pLog->getLoggerMsg("he chain could not be created. Error: %x\n", GetLastError()));		
		return ERR_CERT_CHAIN;
	}