uint_t verifyCertificateForSign(PCCERT_CONTEXT pCertContext)
{
	
	assert(pCertContext);

	uint_t dwFlags = CERT_CHAIN_REVOCATION_CHECK_CHAIN | CERT_CHAIN_CACHE_END_CERT | CERT_CHAIN_REVOCATION_CHECK_CACHE_ONLY;
	

	CERT_ENHKEY_USAGE EnhkeyUsage;
	EnhkeyUsage.cUsageIdentifier = 0;
	EnhkeyUsage.rgpszUsageIdentifier = NULL;

	CERT_USAGE_MATCH CertUsage;
	CertUsage.dwType = USAGE_MATCH_TYPE_AND;
	CertUsage.Usage  = EnhkeyUsage;

	CERT_CHAIN_PARA ChainPara;
	ChainPara.cbSize = sizeof(CERT_CHAIN_PARA);
	ChainPara.RequestedUsage = CertUsage;

	PCCERT_CHAIN_CONTEXT pChainContext = 0;

	if(!CertGetCertificateChain(
			NULL,                  // use the default chain engine
			pCertContext,          // pointer to the end certificate
			NULL,                  // use the default time
			NULL,                  // search no additional stores
			&ChainPara,            // use AND logic and enhanced key usage 
								   //  as indicated in the ChainPara 
								   //  data structure
			dwFlags,
			NULL,                  // currently reserved
			&pChainContext))       // return a pointer to the chain created
	{
		uint_t err = GetLastError();
		
		return err;	
	}

	

	// Параметры для CertVerifyCertificateChainPolicy. 
	// Заполняем структуру с параметрами проверки
	CERT_CHAIN_POLICY_PARA						chainPolicyPara			= { sizeof(chainPolicyPara) };
	CPSIGNATURE_EXTRA_CERT_CHAIN_POLICY_PARA	extraChainPolicyPara	= { sizeof(extraChainPolicyPara) };
	
	chainPolicyPara.dwFlags = CPPRIVATEKEY_USAGE_PERIOD_CERT_CHAIN_POLICY_SKIP_END_CERT_FLAG; //не проверять срок действия закрытого ключа конечного сертификата


	//Готовим структуру для получения статусов
	CERT_CHAIN_POLICY_STATUS					chainPolicyStatus		= { sizeof(chainPolicyStatus) };
	CPSIGNATURE_EXTRA_CERT_CHAIN_POLICY_STATUS	extraChainPolicyStatus	= { sizeof(extraChainPolicyStatus) };
	
	chainPolicyStatus.pvExtraPolicyStatus = &extraChainPolicyStatus;

	uint_t resultCode = 0;

	// Зовём CertVerifyCertificateChainPolicy
	if(!CertVerifyCertificateChainPolicy(
				CPCERT_CHAIN_POLICY_SIGNATURE, 
				pChainContext, 
				&chainPolicyPara,
				&chainPolicyStatus))
	{
		resultCode = GetLastError();
		
		return resultCode;
	}
	

	resultCode = chainPolicyStatus.dwError;

	// В случае, если имеется расширенный ответ
	if (extraChainPolicyStatus.dwError)
		resultCode = extraChainPolicyStatus.dwError;
	

	CertFreeCertificateChain(pChainContext);

	return resultCode;
}