Technical Tip: 'One or more certificates are invalid' error

[cmaheu]

Description
While installing SSL certificates, the error "One or more certificates are invalid" appears.

Scope
Version:  8.x

Solution
In the appliance CLI, review /bsc/logs/tomcat-admin/catalina.out  log and look for errors.

Common causes:

• Private Key does not match certificate.  This could be due to any of the following:
• Key is password protected: Convert to RSA format or install key without password protection.  See related KB article below.
  
• The wrong key was installed:  Reinstall correct key and certificates.  See  SSL Certificates reference manual for detailed instructions.
• Incomplete certificate chain: To identify if there are missing certificates, see related KB article below.

Related Articles

Technical Note: Identify missing SSL certificates via administration UI

Technical Note: Convert SSL private key to RSA format

Technical Note: Invalid private key error while installing SSL certificate