Problem installing certificate in IIS 7 with Windows Server 2008

[javierdiaz]

Hello, I have a problem installing the certificate in the IIS, in the MMC console I import the .CRT file, all perfect. When I go to IIS and select "Complete request", I select my .CRT file again but when I finish it I get the error "An incorrect ASN1 tag value was found". Could someone help me with any ideas?

[dc352 · Accepted solution]

"Complete request" is for uploading a CRT file you receive from your Certificate Authority. 

The content of your CRT file - when you open it in a text editor, is it readable and does it start with something like " ------ CERTIFICATE ".... ?  If so then the file is NOT in a correct format and you need to convert it (e.g., here - https://www.sslshopper.com/ssl-converter.html )

I assume that you generated your certificate request with IIS, submitted it to a CA and received a new certificate. If you create the request (CSR) elsewhere, you will also need to import a private key .... but that gets a bit more complicated.

———

I've worked around (not only) SSL security for over 20 years in enterprises and startups. 

I am now running an HTTPS expiry management service KeyChest.net

https://www.digicert.com/csr-ssl-installation/iis-7.htm

[jennylee525]

I am having the same issue. The complete cert request is looking for a .cer file. Go Daddy only gave me a .pem, .crt. pb7.  I tried converting the .crt file to .der but the IIS says it cannot find the cert request. Any ideas?

[GratefulDiver]

Same problem here, no .cer file in the zip, no matter what platform is chosen. I've been using GoDaddy certs for about 10 years, every time I need to renew its another headache.

[jennylee525]

I finally got it to work by downloading a digicert utility on that server and searched for my certificate and it found it and I asked it to fix the private key and then it was in iis and working.