FAQs

This guide provides the step-by-step process for generating a Certificate Signing Request (CSR), which is the first step in obtaining an X.509 digital certificate. A CSR contains the public key and identity information required by a Certificate Authority (CA) to issue a certificate. This guide covers three methods: using ASDM, using ASA CLI, and using OpenSSL.

Exporting your Sectigo S/MIME certificate as a .pfx file requires both the certificate and its private key to be present on the same system. Learn how to export your S/MIME certificate as a .PFX file.

How-to-fix-keyset-does-not-exist-keyset-Not-defined-for-Entrust-Document-Signing-certificates

This article will help you to renew a SCEP RA certificate

This article explains how to resolve the "Unable to decrypt message" error that Gmail recipients see when they open S/MIME-signed or encrypted email sent from Microsoft Outlook. It covers the certificate and cryptographic-algorithm causes and the Outlook settings that fix them.

CAA records let you specify which certificate authorities may issue certificates for your domain. This article explains what a CAA record is and how to add one to authorize Sectigo, including how to resolve CAA check pre-sign failures for SSL/TLS and S/MIME certificates.

This article explains how to install an SSL certificate on a domain hosted on a Linux VPS using the DirectAdmin control panel.

Private Key overview and Protection Process

This guide explains how to diagnose and resolve the issue where VMware Center rejects a SHA‑1 root certificate, preventing proper certificate validation during secure communication.

Sectigo Public Intermediates and Roots