---
title: "E02087 — MTLSClientCertificateInvalid"
description: "The client certificate is not valid for this workspace."
canonical: "https://bird.com/docs/api/errors/E02087"
---

# E02087 — MTLSClientCertificateInvalid

The client certificate is not valid for this workspace.

- **HTTP status**: `401`
- **Type**: `auth_error`
- **Name**: `MTLSClientCertificateInvalid`

## What to do

Present a certificate that chains to one of the workspace's certificate authorities, is in its validity period and has the clientAuth extended key usage. If the workspace sets an expected subject alternative name, the certificate must contain it.

## Related

- [Authentication](/docs/api/authentication): API keys, regions, and header format
- [E02xxx — Auth & identity](/docs/api/errors/E02xxx): every code in this range
- [Errors](/docs/api/errors): the full wire contract, status mapping, and error catalog
- [Error handling](/docs/guides/errors): branching on `type` and `code`, validation details, and `vendor_code`

## Related resources

- [Should I use a Bird SDK or call the API directly?](/explained/platform/should-i-use-an-sdk-or-call-the-api-directly) (answer)
- [Build your first integration](/learn/paths/integration) (course)
- [Send your first email](/docs/get-started/send-your-first-email) (docs)

[Get an implementation brief](/learn/workspace?topic=api-basics)