Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Consider a scenario of importing a .cer file for use in IIS 7.

The CSR was NOT created on this machine. After receiving a .cer file from the CA, the Complete Certificate Request wizard prompts for the CA's response and your friendly name for use in IIS.

CertEnroll: CX509Enrollment::p_InstallResponse: ASN1 bad tag value met.

How can you avoid this error and complete the certificate request in IIS7? Is this due to the CSR not being created on this machine? Digicert seems to think it's not the issue.

alt text

share|improve this question
up vote 1 down vote accepted

Did you check this article ASN1 bad tag value met.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.