TechNet
Products
IT Resources
Downloads
Training
Support
Products
Windows
Windows Server
System Center
Microsoft Edge
Office
Office 365
Exchange Server
SQL Server
SharePoint Products
Skype for Business
See all products »
Resources
Channel 9 Video
Evaluation Center
Learning Resources
Microsoft Tech Companion App
Microsoft Technical Communities
Microsoft Virtual Academy
Script Center
Server and Tools Blogs
TechNet Blogs
TechNet Flash Newsletter
TechNet Gallery
TechNet Library
TechNet Magazine
TechNet Wiki
Windows Sysinternals
Virtual Labs
Solutions
Networking
Cloud and Datacenter
Security
Virtualization
Updates
Service Packs
Security Bulletins
Windows Update
Trials
Windows Server 2016
System Center 2016
Windows 10 Enterprise
SQL Server 2016
See all trials »
Related Sites
Microsoft Download Center
Microsoft Evaluation Center
Drivers
Windows Sysinternals
TechNet Gallery
Training
Expert-led, virtual classes
Training Catalog
Class Locator
Microsoft Virtual Academy
Free Windows Server 2012 courses
Free Windows 8 courses
SQL Server training
Microsoft Official Courses On-Demand
Certifications
Certification overview
Special offers
MCSE Cloud Platform and Infrastructure
MCSE: Mobility
MCSE: Data Management and Analytics
MCSE Productivity
Other resources
Microsoft Events
Exam Replay
Born To Learn blog
Find technical communities in your area
Azure training
Official Practice Tests
Support options
For business
For developers
For IT professionals
For technical support
Support offerings
More support
Microsoft Premier Online
TechNet Forums
MSDN Forums
Security Bulletins & Advisories
Not an IT pro?
Microsoft Customer Support
Microsoft Community Forums
Sign in
Home
Library
Wiki
Learn
Gallery
Downloads
Support
Forums
Blogs
Resources For IT Professionals
United States (English)
Россия (Pусский)
中国(简体中文)
Brasil (Português)
Skip to locale bar
Post an article
Translate this page
Powered by
Microsoft® Translator
Wikis - Page Details
First published by
FZB
(Microsoft Partner)
When:
9 Jul 2014 11:59 PM
Last revision by
Richard Mueller
(MVP, Microsoft Community Contributor)
When:
20 Aug 2014 10:47 AM
Revisions:
5
Comments:
3
Options
Subscribe to Article (RSS)
Share this
Engage!
Wiki Ninjas Blog
(
Announcements
)
Wiki Ninjas on Twitter
TechNet Wiki Discussion Forum
Can You Improve This Article?
Positively!
Click Sign In to add the tip, solution, correction or comment that will help other users.
Report inappropriate content using
these instructions
.
Wiki
>
TechNet Articles
>
IIS7+: Renewing a SSL Certificate
IIS7+: Renewing a SSL Certificate
Article
History
IIS7+: Renewing a SSL Certificate
When renewing a
SSL
certificate in IIS7 or newer, the format of the generated request file was changed. (Internet Information Services (
IIS
) Manager -> Your Server -> Server Certificates -> Select the certificate to renew and chose renew from the righthand/context menue). In the past, the
CSR
was sent as
PKCS
#10. With the new format, there is a PKCS#7 container holding the PKCS#10 request and additional information (the actual CSR part gets signed with your old cert). Unfortunately, not all
CA
's support this CSR format (giving for example errors about invalid encoding). In that case, you can use the certutil command line tool to extract the PKCS#10 CSR part (
DER
) and encode it in
Base64
with the following commands:
certutil -split c:\temp\yourrenewrequestfile.txt
certutil -encode c:\temp\blob0_1.p10 c:\temp\youroutputCSRfortheCA.csr
where the first command extracts the objects from the PKCS#7 container and the second command encodes the CSR part (blob0_1.p10) in Base64. This CSR is accepted by most CA's.
Keep in mind that as of 2014, certificates have to have more than 1024 bit key length, so the renew might still be invalid and you still have to generate a new request. Most CA's offer tools to check your request (for Symantec it is for example
https://ssltools.websecurity.symantec.com/checker/views/csrCheck.jsp
)