FAQs

This guide provides the step-by-step process for generating a Certificate Signing Request (CSR), which is the first step in obtaining an X.509 digital certificate. A CSR contains the public key and identity information required by a Certificate Authority (CA) to issue a certificate. This guide covers three methods: using ASDM, using ASA CLI, and using OpenSSL.

Exporting your Sectigo S/MIME certificate as a .pfx file requires both the certificate and its private key to be present on the same system. Learn how to export your S/MIME certificate as a .PFX file.

How-to-fix-keyset-does-not-exist-keyset-Not-defined-for-Entrust-Document-Signing-certificates

This article will help you to renew a SCEP RA certificate

CAA is a standard that lets you control what certificate authorities (CAs) are allowed to issue certificates for your domain. Learn how to resolve CAA Check pre-sign failures and authorize Sectigo to issue certificates for your domain

When sending S/MIME-secured emails from Microsoft Outlook to Gmail, recipients may encounter errors such as:  “Unable to decrypt the message”  or  Messages that cannot be opened, verified, or properly displayed  Even when certificates are correctly installed, these issues can still occur due to interoperability limitations between email clients and cryptographic configurations.

Private Key overview and Protection Process

This guide provides a step-by-step process for installing an SSL certificate on a domain hosted on a Linux VPS using the DirectAdmin control panel.

This guide explains how to diagnose and resolve the issue where VMware Center rejects a SHA‑1 root certificate, preventing proper certificate validation during secure communication.

Sectigo Public Intermediates and Roots