在 Microsoft Windows Server 2003 中，使用 Cryptography API (CAPI) 的应用程序无法验证 X.509 证书.如果证书受安全散列算法 2 (SHA2) 系列散列算法保护，则会出现此问题.如果应用程序需要 SHA2 系列哈希算法，它们可能无法按预期工作.

In Microsoft Windows Server 2003, applications that use the Cryptography API (CAPI) cannot validate an X.509 certificate. This problem occurs if the certificate is secured by the Secure Hash Algorithm 2 (SHA2) family of hashing algorithms. Applications may not work as expected if they require the SHA2 family of hashing algorithms.

http://support.microsoft.com/kb/938397 为我解决了这个问题.

http://support.microsoft.com/kb/938397 fixed the problem for me.