FAQs

This guide provides the step-by-step process for generating a Certificate Signing Request (CSR), which is the first step in obtaining an X.509 digital certificate. A CSR contains the public key and identity information required by a Certificate Authority (CA) to issue a certificate. This guide covers three methods: using ASDM, using ASA CLI, and using OpenSSL.

If the private key associated with your certificate is compromised, the certificate must be revoked immediately to prevent unauthorized use. Learn from the article about the certificate revocation process.

How-to-fix-keyset-does-not-exist-keyset-Not-defined-for-Entrust-Document-Signing-certificates

This article will help you to renew a SCEP RA certificate

CAA is a standard that lets you control what certificate authorities (CAs) are allowed to issue certificates for your domain. Learn how to resolve CAA Check pre-sign failures and authorize Sectigo to issue certificates for your domain

This article explains how to install an SSL certificate on a domain hosted on a Linux VPS using the DirectAdmin control panel.

This article explains how to reissue or replace an SSL certificate through the Sectigo portal.

Private Key overview and Protection Process

This guide explains how to diagnose and resolve the issue where VMware Center rejects a SHA‑1 root certificate, preventing proper certificate validation during secure communication.

Sectigo Public Intermediates and Roots