Announcement

Collapse
No announcement yet.

CertEnroll::CX509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x8009310b (ASN: 267)

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • CertEnroll::CX509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x8009310b (ASN: 267)

    There might have been few instances while Completing the SSL Certificate Re-newel Request through IIS the following error might displayed.

    Click image for larger version

Name:	SSL1.jpg
Views:	1
Size:	32.0 KB
ID:	160412

    The error is mostly seen on 64 bit servers with IIS 7.0 while renewing the SSL certificate.

    Click image for larger version

Name:	SSL2.jpg
Views:	1
Size:	13.8 KB
ID:	160413

    If the private key is missing, this could mean:
    1. The certificate is not being installed on the same server that generated the CSR.
    2. The pending request was deleted from IIS.
    3. The certificate was installed through the Certificate Import Wizard rather than through IIS.



    You can follow the steps to resolve the issue.

    Firstly import the .crt file into the Personal certificate store for the local computer.

    How to add the Certificates snap-in:
    1. Click Start, and then click Run.
    2. Type MMC and click OK.
    3. From the File menu, choose Add/Remove Snap-in.
    4. In the new window that appears, click Add.
    5. Select Certificates and then click Add.

    Click image for larger version

Name:	SSL3.jpg
Views:	1
Size:	83.5 KB
ID:	160414

    6 Choose the Computer account option and click Next.

    Click image for larger version

Name:	SSL4.jpg
Views:	1
Size:	19.8 KB
ID:	160415

    7 Select Local Computer and then click Finish.

    Click image for larger version

Name:	SSL5.jpg
Views:	1
Size:	35.5 KB
ID:	160416

    8 Click Close, and then click OK. The snap-in for Certificates (Local Computer) appears in the console.

    Click image for larger version

Name:	SSL6.jpg
Views:	1
Size:	38.3 KB
ID:	160417

    Once the .crt file is imported under Personal certificate store, you will need to follow the steps complete the process.

    Double-click the crt certificate file you just imported

    The Certificate dialog box appears.
    Click image for larger version

Name:	SSL15.jpg
Views:	1
Size:	45.9 KB
ID:	160418

    Select the Details tab.

    Click image for larger version

Name:	SSL16.jpg
Views:	1
Size:	48.9 KB
ID:	160419

    Scroll all the way down to Thumbprint and highlight Thumbprint, copy the thumbprint characters into notepad.

    The last step you will need to follow is through commend prompt.

    Open the command prompt and run this command: Certutil

    certutil -repairstore my "{insert all of the thumbprint characters here}"

    Click image for larger version

Name:	SSL17.jpg
Views:	1
Size:	68.0 KB
ID:	160420

    The certificate should show up in the IIS Managerís list of server certificates at this point.

    Once it show up in the IIS Managerís list, you can bind the SSL to the domain.
Working...
X