I get the error message, "There was an error while performing this operation. Details:
CertEnroll::CX509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x8009310b (SAN: 267)"
This error appears in IIS 7.0 on a 64-bit environment. This error
simply means the certificate file that you are trying to install does
not match the private key that is pending. This usually happens when
the incorrect CSR is used to generate the certificate.
To avoid this problem in future, you must make sure that the CSR that
was created along with the pending private key, is the same CSR
submitted to QuoVadis. You cannot take a CSR from one server and
install it onto another.
If you receive this error, you can check the CSR that you submitted against the certificate using the Match Certificate & CSR tool found on within our PKI Widgets. If our Match Certificate & CSR
tool tells you that the CSR and certificate file do not match we
recommend that you start fresh with a brand new CSR. This will create a
new private key. It is also recommended that you do not overwrite
the previous files that you have used as this can lead to confusion.
You can distinguish between files by adding "_new" or a number to the
file name.
Example:
www.example.com_new.crt
www.example.com_2.crt
If you continue to have problems with this error, please contact QuoVadis Support who will be more than happy to assist you.
