Expressway Server Certificate Invalid

[romy kurniawan]

I am Trying to upload Server Certificate for Expressway  E, but i am getting below Error message:

Invalid certificate: Unrecognized CA. This certificate is not currently trusted by the Expressway. This is because the CA certificate is not in the trust store.

i have uploaded CA root certificate to Trusted root certificate.

[b.winter]

What's the CN of the CA?
Is it only a Root CA or also a Intermediate CA?
Can you make a screenshot of the CA page of expressway?

[romy kurniawan]

CN = DigiCert Global Root CA

I get root CA and inter CA. I uploaded both of them on Trusted CA Certificate

These are certificate i got from Digicert

[b.winter]

Can you open the expressway cert and go to "Details" and make a screenshot of the "issuer" and "enhanced key usage"?

[romy kurniawan]

These are the screenshoot of expressway cert issuer and enhanced key usage

[b.winter]

Have you tried to export the CA's from the expressway cert and upload those certs into expressway?
In the expressway cert go to "certification path" and export the CA's.

Maybe a reboot helps too. Looks a bit weird.

[romy kurniawan]

thanks, after export the CA's from expressway cert and upload it to trusted CA certificate, i can upload the expressway cert into server certificate.

[b.winter]

Glad to hear that.
Maybe something was wrong with the CA's which you got. Whereas, if you export them from the certificate, normally is the safest way to get the "correct" CA's.

Would appriciate it to get one of my replies marked as the solution ':)'

[dgonzalez1]

This tip also worked for me. In my case there was an intermediate certificate between the CA and the server ones that was missing.

Thank you!

[faizzakiICS]

this worked for my issue as well, thanks for the help

[mustanali]

hello,

I am receiving the same error. how to export the CA certificate. I cannot see any export option.

[b.winter]

How to export a CA certificate from a .cer file is nothing cisco specific. You could have used google for that:
https://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-certificate-management

Section: "Export CA certificate(s) from the public certificate"