Tagged: ssl


SSL Certificate Troubleshooting

Before you can order your SSL Certificates, you must first generate a CSR (Certificate Signing Request) on your server. A CSR is an encrypted body of text. Your CSR will contain encoded information specific to your company and domain name; this information is known as a Distinguished Name or DN.

CSR Support Video

In the DN for most servers are the following fields: Country, State (or Province), Locality (or City), Organization, Organizational Unit, and Common Name. Please note:

The Country is a two-digit code — for the United States, it’s ‘US’. For countries outside of the United States, see our listing of SSL Certificate Country Codes.
State and Locality are full names, i.e. ‘California’, ‘Los Angeles’.
The Organization Name is your Full Legal Company or Personal Name, as legally registered in your locality.
The Organizational Unit is whichever branch of your company is ordering the certificate such as accounting, marketing, etc.
The Common Name is the Fully Qualified Domain Name (FQDN) for which you are requesting the ssl certificate.

If you are generating a CSR for a Wildcard Certificate your common name must start with *. (for example: *.digicert.com). The wildcard character (*) will be able to assume any name that does not have a “dot” character in it.


You have a private key that corresponds to this certificate but CryptAcQuireCertificatePrivateKey failed

First download “SSL Diagnostics Version 1.1 (x86)” and find out why your SSL does not work… (link below) http://www.microsoft.com/downloads/en/details.aspx?FamilyID=cabea1d0-5a10-41bc-83d4-06c814265282&displaylang=en If first solution does not work, try below: 1. Set the correct permission for Machinekey...


Disable SSL 2 on Windows Server

Secure Socket Layer protocol version 2 (SSL v2) has a serious vulnerability. Successful exploitation of this vulnerability would allow an attacker to execute arbitrary code in the context of the affected server. No authentication...