-1027 is used when ES cannot find the issuer of a certificate. -1012 is used when the signature type is invalid.