« Previous Next »

Answered Thread: Error: ASN1 bad tag value met. 0x8009310b(ASN: 267) when installing a VeriSign SSL certificate using IIS 7 server

Last post 12-31-2008 7:18 PM by viisual.net. 7 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (8 items)

Sort Posts:

Shortcuts

Search | Active Posts | Unanswered Posts | View all users

  • 07-11-2008, 3:25 PM

    • jrmcfobb
    • Not Ranked
    • Joined on 07-11-2008, 6:45 PM
    • Posts 2

    Error: ASN1 bad tag value met. 0x8009310b(ASN: 267) when installing a VeriSign SSL certificate using IIS 7 server

    Reply Contact

    Hello... Is anyone seen this error when attempting to install a VeriSign chain certificate using IIS 7 server?

     CertEnroll:CX509Enrolment:p_InstallResponse: ASN1 bad tag value met. 0x8009310b(ASN: 267)

     I have search the internet to no avail... Any help is greatly appreciated.

     Thank you

     


     

     

  • 07-15-2008, 12:07 PM In reply to

    Re: Error: ASN1 bad tag value met. 0x8009310b(ASN: 267) when installing a VeriSign SSL certificate using IIS 7 server

    Reply Contact

    Hi,

    I did see one post before that this error is related to permissions of certificate store. Are you running from administrative accounts, make sure you have enough permissions during the installing of certificates.

    Zhao Ji Ma
    Sincerely,
    Microsoft Online Community Support

    “Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”

  • 07-15-2008, 4:04 PM In reply to

    • jrmcfobb
    • Not Ranked
    • Joined on 07-11-2008, 6:45 PM
    • Posts 2

    Re: Error: ASN1 bad tag value met. 0x8009310b(ASN: 267) when installing a VeriSign SSL certificate using IIS 7 server

    Reply Contact

    Thanks Zhao. I was wondering if you guys have any kind of knowledge base article that talks about this error within IIS 7 during an SSL certificate install?  It would be great if there is one.

     We would like to put this information in our knowledge base to better assist our customers at VeriSign.

     Thank you for your support.

     Regards,

    Jason R.
     


     

  • 07-16-2008, 8:03 AM In reply to

    Answered Re: Error: ASN1 bad tag value met. 0x8009310b(ASN: 267) when installing a VeriSign SSL certificate using IIS 7 server

    Reply Contact

    Hi Jason,

    I did see one http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=1348224&SiteID=1, perhaps it helps. 

    Zhao Ji Ma
    Sincerely,
    Microsoft Online Community Support

    “Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”

  • 10-09-2008, 2:02 PM In reply to

    Re: Error: ASN1 bad tag value met. 0x8009310b(ASN: 267) when installing a VeriSign SSL certificate using IIS 7 server

    Reply Contact

    I leave this behind for anyone else searching for an answer to this question.  NOTE: I am not using a VeriSign certificate, so this is not directly pertinent to the original question.  I leave it behind because the error message is the same and hits on the search engines.

    I leave the message with double colons here so that search will pick it up more readily.

    CertEnroll::CX509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x08009310b (ASN: 267)

    I requested a certificate from an IIS 7.0 Web Server.  I used the request to create a certificate within our internal CA and generate a .cer file.  When I went to install the .cer file in the web server, I got hit with this error message.  It didn't take too much digging to find a hint that perhaps the CA was not trusted by the Web Server.  I added the internal CA chain to the Web Server and this got me past the message.  Just to be sure, I removed the root certificate from the Trusted Root Certification Authorities folder and tried again - I got the error again.  This is a verified cause.  Certainly this may not be the only cause.  I sure wish the error message were better.
    Tags:

  • 10-23-2008, 2:44 PM In reply to

    Re: Error: ASN1 bad tag value met. 0x8009310b(ASN: 267) when installing a VeriSign SSL certificate using IIS 7 server

    Reply Contact

     I've had the same issue, below is my information...

    • Windows 2008 Web Server 64-bit Edition
    • IIS7
    • SQL 2005 Express
    • Network Solutions Basic SSL certificate

    Each time I try to complete the certificate request I get the following error...

    CertEnroll::CX509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x8009310b (ASN: 267)

    I should also mention that I have already added the 3 other certificates provided by NetworkSolutions under the Certificates snap-in. When I open up IIS I do not see my certificate request listed however IIS knows that it's there so I'm not sure if I should see it listed or not. Under "Certificates -> Certificate Enrollment Requests -> Certificates" I can see the pending request. Up until a few minutes ago I had several listed there and have since cleared/deleted them out and re-requested the certificate from NetworkSolutions although I don't have any faith this will work. There were several from past failed attempts. Should I be able to see the certificate request in IIS7 after creating the initial request before it's completed? My server doesn't do much other than host a few websites and run SQL 2005 Express. I know some have said something about SQL but I can't imagine what that has to do with my situation since I simply want to add an SSL certificate to IIS7 to run a single website with SSL encryption.

    Is it just me or should this not be ridiculously simple to accomplish and yet it's been the single most frustrating thing I had to do in a great long while. NetworkSolutions doesn't have any answers, Microsoft wants to charge me an arm and leg just to say "Hi", and I'm losing my patience with the whole thing since it should literally take less than 5 minutes to complete a simple certificate request.

    Does anyone out there have a solution to this problem because I'm Googled out...

    Thanks in advance for any support provided,

    Matt

    Tags:

  • 12-18-2008, 2:00 PM In reply to

    Re: Error: ASN1 bad tag value met. 0x8009310b(ASN: 267) when installing a VeriSign SSL certificate using IIS 7 server

    Reply Contact

    I'd recommend contacting the certification authority and asking them what their preferred way is to abandon the problematic keypair and how to best make a totally new CSR.

  • 12-31-2008, 7:18 PM In reply to

    Re: Error: ASN1 bad tag value met. 0x8009310b(ASN: 267) when installing a VeriSign SSL certificate using IIS 7 server

    Reply Contact

    Here are two relevant links with different approaches:

    https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&id=S:SO8467&actp=search&searchid=1219125132143  and http://blogs.msdn.com/vijaysk/archive/2008/11/25/certenroll-cx509enrollment-p-installresponse-asn1-bad-tag-value-met-0x8009310b.aspx

     
Page 1 of 1 (8 items)