Trouble Installing SSL Certificates In IIS7

Posted on 2008-11-14
Last Modified: 2012-05-05
I am trying to install a certificate from Netsol and every time I try to complete the cert request I get:

CertEnroll:CX509Enrolment:p_InstallResponse: ASN1 bad tag value met. 0x8009310b(ASN: 267)

At one point the cert was in, but I got an error about cert authority, so I attempted to remove and re-install it.
I have had the cert re-issued and the new one does the same error. Much Thanks Gurus
Question by:i8yurdog
    LVL 10

    Expert Comment


    Expert Comment

    Same problem here. the links by RubalJ did not solve.

    Accepted Solution

    Here's Microsoft's $300 Solution: I saw him do it, you have to grab the thumb print from the certificate store.

    Yes, I  finally had to pay Microsoft for it.



    - CertEnroll::Cx509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x8009310b while installing a new certificate




    - During the first install the certificate had been placed in the Other Users certificate store

    - We moved it to the Local Computers Personal store

    - The certificate was missing the private key

    - Since the certificate was requested form the same machine we used the following command to recover the private key

    Certutil repairstore my certificate thumb print


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Email statistics and Mailbox database quotas You might have an interest in attaining information such as mailbox details, mailbox statistics and mailbox database details from Exchange server. At that point, knowing how to retrieve this information …
    Find out how to use dynamic social media in email signatures with this top 10 DOs & DON’Ts.
    In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
    In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…

    758 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    9 Experts available now in Live!

    Get 1:1 Help Now