FAQs

This guide provides the step-by-step process for generating a Certificate Signing Request (CSR), which is the first step in obtaining an X.509 digital certificate. A CSR contains the public key and identity information required by a Certificate Authority (CA) to issue a certificate. This guide covers three methods: using ASDM, using ASA CLI, and using OpenSSL.

How-to-fix-keyset-does-not-exist-keyset-Not-defined-for-Entrust-Document-Signing-certificates

This article will help you to renew a SCEP RA certificate

Overview Sectigo’s public roots are as widely trusted as any other in the industry. In fact, Sectigo’s root ubiquity is well in excess of 99.99% of systems in use today and is 100% for modern browsers, mobile devices, and operating systems.

CAA records let you specify which certificate authorities may issue certificates for your domain. This article explains what a CAA record is and how to add one to authorize Sectigo, including how to resolve CAA check pre-sign failures for SSL/TLS and S/MIME certificates.

Resolve the BIMI validation error "SVG logo file is not binary equal to the image embedded in VMC certificate," which occurs when the hosted SVG logo does not exactly match the logo inside the VMC.

Why signing a Visual Basic for Applications (VBA) macro with a code signing certificate on a SafeNet token fails with a digital certificate error, and the registry change that resolves it.

Troubleshooting steps for SCM login problems with SAS, Standard, and API authentication, and what to send to Support if access cannot be restored.

Private Key overview and Protection Process

This article explains how to resolve the "Unable to decrypt message" error that Gmail recipients see when they open S/MIME-signed or encrypted email sent from Microsoft Outlook. It covers the certificate and cryptographic-algorithm causes and the Outlook settings that fix them.