title: Different results for SecTrustEvaluate for one certificate for different policies
body: <p>I don't understand in what circumstances below situation happening (piece of code from AFSecurityPolicy.m, AFPublicKeyForCertificate function, AFNetwork Framework):</p>
  
  <pre><code>policy = SecPolicyCreateBasicX509();
  AF_Require_noErr(SecTrustCreateWithCertificates(tempCertificates, policy, &amp;allowedTrust), _out);
  AF_Require_noErr(SecTrustEvaluate(allowedTrust, &amp;result), _out);
  //result = 5 (kSecTrustResultRecoverableTrustFailure)
  
  //different policy
  policy = SecPolicyCreateSSL(true, (__bridge CFStringRef)@"www.MySite.com");
  AF_Require_noErr(SecTrustCreateWithCertificates(tempCertificates, policy, &amp;allowedTrust), _out);
  AF_Require_noErr(SecTrustEvaluate(allowedTrust, &amp;result), _out);
  //result = 4 (kSecTrustResultUnspecified)
  </code></pre>
  
  <p>Certificate is valid and not expired. Signature algorithm SHA-1. Don't get why it return <strong>kSecTrustResultRecoverableTrustFailure</strong> and not <strong>kSecTrustResultUnspecified</strong> for <strong>SecPolicyCreateBasicX509</strong>.</p>