topic Re: Expressway Server Certificate Invalid in Collaboration Applications

Expressway Server Certificate Invalid

romy kurniawan — Wed, 07 Sep 2022 03:14:35 GMT

I am Trying to upload Server Certificate for Expressway E, but i am getting below Error message:

Invalid certificate: Unrecognized CA. This certificate is not currently trusted by the Expressway. This is because the CA certificate is not in the trust store.

i have uploaded CA root certificate to Trusted root certificate.

Re: Expressway Server Certificate Invalid

b.winter — Wed, 07 Sep 2022 08:42:39 GMT

What's the CN of the CA?
Is it only a Root CA or also a Intermediate CA?
Can you make a screenshot of the CA page of expressway?

Re: Expressway Server Certificate Invalid

romy kurniawan — Wed, 07 Sep 2022 09:01:07 GMT

CN = DigiCert Global Root CA

I get root CA and inter CA. I uploaded both of them on Trusted CA Certificate

These are certificate i got from Digicert

Re: Expressway Server Certificate Invalid

b.winter — Wed, 07 Sep 2022 09:27:34 GMT

Can you open the expressway cert and go to "Details" and make a screenshot of the "issuer" and "enhanced key usage"?

Re: Expressway Server Certificate Invalid

romy kurniawan — Wed, 07 Sep 2022 09:38:32 GMT

These are the screenshoot of expressway cert issuer and enhanced key usage

Re: Expressway Server Certificate Invalid

b.winter — Wed, 07 Sep 2022 10:07:08 GMT

Have you tried to export the CA's from the expressway cert and upload those certs into expressway?
In the expressway cert go to "certification path" and export the CA's.

Maybe a reboot helps too. Looks a bit weird.

Re: Expressway Server Certificate Invalid

romy kurniawan — Thu, 08 Sep 2022 03:37:46 GMT

thanks, after export the CA's from expressway cert and upload it to trusted CA certificate, i can upload the expressway cert into server certificate.

Re: Expressway Server Certificate Invalid

b.winter — Thu, 08 Sep 2022 05:37:26 GMT

Glad to hear that.
Maybe something was wrong with the CA's which you got. Whereas, if you export them from the certificate, normally is the safest way to get the "correct" CA's.

Would appriciate it to get one of my replies marked as the solution ':)'

Re: Expressway Server Certificate Invalid

dgonzalez1 — Fri, 07 Jul 2023 17:05:32 GMT

This tip also worked for me. In my case there was an intermediate certificate between the CA and the server ones that was missing.

Thank you!

Re: Expressway Server Certificate Invalid

faizzakiICS — Sat, 14 Oct 2023 00:03:37 GMT

this worked for my issue as well, thanks for the help

Re: Expressway Server Certificate Invalid

mustanali — Wed, 06 Dec 2023 13:02:19 GMT

hello,

I am receiving the same error. how to export the CA certificate. I cannot see any export option.

Re: Expressway Server Certificate Invalid

b.winter — Wed, 06 Dec 2023 13:12:06 GMT

How to export a CA certificate from a .cer file is nothing cisco specific. You could have used google for that:
https://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-certificate-management

Section: "Export CA certificate(s) from the public certificate"