I get the error message, "There was an error while performing this operation. Details:
CertEnroll::CX509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x8009310b (SAN: 267)"
This error appears in IIS 7.0 on a 64-bit environment. This error simply means the certificate file that you are trying to install does not match the private key that is pending. This usually happens when the incorrect CSR is used to generate the certificate.
To avoid this problem in future, you must make sure that the CSR that was created along with the pending private key, is the same CSR submitted to QuoVadis. You cannot take a CSR from one server and install it onto another.
If you receive this error, you can check the CSR that you submitted against the certificate using the Match Certificate & CSR
tool found on within our PKI Widgets. If our Match Certificate & CSR
tool tells you that the CSR and certificate file do not match we recommend that you start fresh with a brand new CSR. This will create a new private key. It is also recommended that you do not overwrite
the previous files that you have used as this can lead to confusion. You can distinguish between files by adding "_new" or a number to the file name.
If you continue to have problems with this error, please contact QuoVadis Support who will be more than happy to assist you.