Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a multi-domain certificate I'm trying to install on IIS 7.0.

When I use the IIS manager to complete certificate request, I get the error:

There was an error while performing this operation. Details:

CertEnroll::CX509Enrollment::p_InstallResponse: ASN1 bad tag value met. 0x8009310b (ASN: 267)

One possible solution I found was to run certutil (after importing the cert via certmgr.msc):

certutil -repairstore my "certificate thumbprint"

But this gives me the error:

CertUtil: -repairstore command FAILED: 0x80090011 (-2146893807)
CertUtil: Object was not found.

I also tried importing the new certificate into IIS7, after converting it to a pfx file. IIS takes it but I can't bind it.

The error I get when I try to bind it is :

There was an error while performing this operation.

Details : A specified logon session does not exist. It may already have been terminated.

Any help is appreciated.

share|improve this question
Does the certificate have a private key? – Greg Askew Aug 23 '12 at 18:27
Yes. I still have the certificate sitting in certificate enrollment requests. When I double click it, it says " you have a private key that corresponds to this certificate". – James Aug 23 '12 at 18:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.