W P Staff asked 6 years ago
When i try to install my renewed certificate in IIS 7 i get the following error: CertEnroll::Cx509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x8009310b
W P Staff answered 6 years ago
Recently while installing a SSL certificate on IIS 7.0 I got this error message
CertEnroll::Cx509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x8009310b
I could not complete the certificate request via IIS manager.
But strangely after this error the certificate was placed in the Other People certificate store.
Only certificates that are stored in the Local Computer store can be used in IIS.
To restore the certificate to the Local Computer store you can load the two CertificatesMMC (Local Computer & Local User). Drag it out of the Other People store and drop it under the Local Computer > Personal > Certificates.
But if you double click the certificate you will see that the private key is missing. Without a private key the certificate is worthless as even if you configure it on your website in IIS you will end up getting Page Cannot Be Displayed.
Now if the request for the certificate was issued from the same machine you can use the command below to restore the private key for your certificate.
certutil –repairstore my “00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f”
The sequence in the quotes is the thumbprint of the SSL certificate.
This should restore the private key for that certificate. You should see a “You have a private key that corresponds to this certificate” message when you open it .
Now the certificate is installed in your Local Computer certificate store so you go into your website properties and assign the certificate by changing the bindings settings.