When Starting a Runtime Resource Using the /Sslcert Switch, What

When starting a Runtime Resource using the /sslcert switch, what reasons can prevent it from starting? (Choose two.)

A) If the name on the certificate does not match the name (or correct format) of the Runtime Resource
B) If the thumbprint of the certificate is not for a valid certificate on the local device
C) If the certificate has expired or been revoked
D) If the certificate has not been issued by a certification authority that is trusted by device attempting to connect