cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Go to solution

Problem installing certificate in IIS 7 with Windows Server 2008

Hello, I have a problem installing the certificate in the IIS, in the MMC console I import the .CRT file, all perfect. When I go to IIS and select "Complete request", I select my .CRT file again but when I finish it I get the error "An incorrect ASN1 tag value was found". Could someone help me with any ideas?

1 ACCEPTED SOLUTION
Resolver III

"Complete request" is for uploading a CRT file you receive from your Certificate Authority. 

 

The content of your CRT file - when you open it in a text editor, is it readable and does it start with something like " ------ CERTIFICATE ".... ?  If so then the file is NOT in a correct format and you need to convert it (e.g., here - https://www.sslshopper.com/ssl-converter.html )

 

I assume that you generated your certificate request with IIS, submitted it to a CA and received a new certificate. If you create the request (CSR) elsewhere, you will also need to import a private key .... but that gets a bit more complicated.

 

———

I've worked around (not only) SSL security for over 20 years in enterprises and startups. 

I am now running an HTTPS expiry management service KeyChest.net

 

https://www.digicert.com/csr-ssl-installation/iis-7.htm

View solution in original post

4 REPLIES 4
Resolver III

"Complete request" is for uploading a CRT file you receive from your Certificate Authority. 

 

The content of your CRT file - when you open it in a text editor, is it readable and does it start with something like " ------ CERTIFICATE ".... ?  If so then the file is NOT in a correct format and you need to convert it (e.g., here - https://www.sslshopper.com/ssl-converter.html )

 

I assume that you generated your certificate request with IIS, submitted it to a CA and received a new certificate. If you create the request (CSR) elsewhere, you will also need to import a private key .... but that gets a bit more complicated.

 

———

I've worked around (not only) SSL security for over 20 years in enterprises and startups. 

I am now running an HTTPS expiry management service KeyChest.net

 

https://www.digicert.com/csr-ssl-installation/iis-7.htm

View solution in original post

I am having the same issue. The complete cert request is looking for a .cer file. Go Daddy only gave me a .pem, .crt. pb7.  I tried converting the .crt file to .der but the IIS says it cannot find the cert request. Any ideas?

Same problem here, no .cer file in the zip, no matter what platform is chosen. I've been using GoDaddy certs for about 10 years, every time I need to renew its another headache.

I finally got it to work by downloading a digicert utility on that server and searched for my certificate and it found it and I asked it to fix the private key and then it was in iis and working.