Is there a way to use signed application certificate for client?
If I try to substitute default self-signed certificate with same certificate but signed by my CA it won't pass validation.
There is another thing I've tried, I've created my own V3 certificate and signed it, same story it didn't pass validation.

It worked well with ver 2 of UA client SDK.

You are right, it goes to rejected folder, and I have to move them manually one directory up.
What I want to achieve is to sign client application certificate myself (the one which client will generate on its own if it is missing) so I don't have to move them manually (on the server), due to lack of access to servers and I wish to use CA to authorize clients by signing client application certificates.
I was able to do that in version 2 of client SDK (I mean to substitute client application certificate with signed one).
As soon as I sign client application certificate myself it won't pass validation inside the client and client throws me OpcUa_BadInternalError 0x80020000 on initialization.
No issues with user certificate though, I can sign that one and server successfully validates it without moving anything to rejected directory because it is signed and server knows about CA.
I hope this makes sense.

Hi Dima,

We analyzed it further and found it is a issue at our end. We will fixing it.
Thanks for reporting this issue.

Regards,
Shubhi Gogna