Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

The Certificate Signing Request (CSR) that you submitted contains characters that are not permitted

0

0

Article ID: KB5720 KB Last Updated: 19 Jun 2010Version: 5.0
Summary:
The Certificate Signing Request (CSR) that you submitted contains characters that are not permitted
Symptoms:
Cannot generate a certificate with Verisign Fully Qualified Domain Name, FQDN, configured on the NetScreen Verisign Certificate Authority (CA)
Solution:

This message appears whenever uploading the pkcs10.txt file (created when submitting a certificate request on the NetScreen) in the CSR file field on the Verisign CA server.  If any of the fields in the certificate request form contains a '*', '?', ':', or a space in any of the common name fields (i.e. Name, Organization, etc ...), the Verisign CA server will reject that request.  Verisign CA is very picky about what can be submitted when requesting a certificate. 

Re-submit the certificate request, and make sure the certificate request fields do not include the following characters:

  • *
  • ?
  • :
  • ,
  • Any spaces

Please see nskb2275 for details on determining if the pkcs10.txt file includes any of these invalid characters.

Here is the problem or goal:

  • The Certificate Signing Request (CSR) that you submitted contains characters that are not permitted

Problem Environment:

  • Cannot generate a certificate with Verisign
  • Fully Qualified Domain Name, FQDN, configured on the NetScreen
  • Verisign Certificate Authority (CA)

Applicable Products:

  • NetScreen-5
  • NetScreen-5XP
  • NetScreen-5XT
  • NetScreen-10
  • NetScreen-25
  • NetScreen-50
  • NetScreen-100
  • NetScreen-204
  • NetScreen-208
  • NetScreen- 500
  • NetScreen-1000
  • NetScreen-5200

Applicable ScreenOS:

  • 2.6.0
  • 2.6.1
  • 2.7.1
  • 2.8.0
  • 3.0.0
  • 3.0.1
  • 3.0.2
  • 3.0.3
  • 3.1.0
  • 4.0.0


Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search