I get the error message, "There was an error while performing this operation. Details: CertEnroll::CX509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x8009310b (SAN: 267)"

Problem

I get the error message, "There was an error while performing this operation. Details:
CertEnroll::CX509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x8009310b (SAN: 267)"

Resolution

This error appears in IIS 7.0 on a 64-bit environment.  This error simply means the certificate file that you are trying to install does not match the private key that is pending.  This usually happens when the incorrect CSR is used to generate the certificate.

To avoid this problem in future, you must make sure that the CSR that was created along with the pending private key, is the same CSR submitted to QuoVadis.  You cannot take a CSR from one server and install it onto another.

If you receive this error, you can check the CSR that you submitted against the certificate using the Match Certificate & CSR tool found on within our PKI Widgets.  If our Match Certificate & CSR tool tells you that the CSR and certificate file do not match we recommend that you start fresh with a brand new CSR.  This will create a new private key.  It is also recommended that you do not overwrite the previous files that you have used as this can lead to confusion.  You can distinguish between files by adding "_new" or a number to the file name.

Example:
www.example.com_new.crt
www.example.com_2.crt

If you continue to have problems with this error, please contact QuoVadis Support who will be more than happy to assist you.

Add Feedback