FAQs

This guide provides the step-by-step process for generating a Certificate Signing Request (CSR), which is the first step in obtaining an X.509 digital certificate. A CSR contains the public key and identity information required by a Certificate Authority (CA) to issue a certificate. This guide covers three methods: using ASDM, using ASA CLI, and using OpenSSL.

Exporting your Sectigo S/MIME certificate as a .pfx file requires both the certificate and its private key to be present on the same system. Learn how to export your S/MIME certificate as a .PFX file.

How-to-fix-keyset-does-not-exist-keyset-Not-defined-for-Entrust-Document-Signing-certificates

This article will help you to renew a SCEP RA certificate

CAA records let you specify which certificate authorities may issue certificates for your domain. This article explains what a CAA record is and how to add one to authorize Sectigo, including how to resolve CAA check pre-sign failures for SSL/TLS and S/MIME certificates.

This article explains how to install an SSL certificate on a domain hosted on a Linux VPS using the DirectAdmin control panel.

When sending S/MIME-secured emails from Microsoft Outlook to Gmail, recipients may encounter errors such as:  “Unable to decrypt the message”  or  Messages that cannot be opened, verified, or properly displayed  Even when certificates are correctly installed, these issues can still occur due to interoperability limitations between email clients and cryptographic configurations.

Private Key overview and Protection Process

This guide explains how to diagnose and resolve the issue where VMware Center rejects a SHA‑1 root certificate, preventing proper certificate validation during secure communication.

Sectigo Public Intermediates and Roots