Discussions / FAQs
How do I download my intermediate certificate?
Once the order is complete there is the option to download the certificate from the order management page within your account. Within the Certificates section of the order management page is the option to select [Show CA Certs]. Clicking this will reveal the intermediate and root certificates linked to your certificate.
[Download Certificate Docs](https://docs.servertastic.com/docs/https-orders#download-certificate)
Posted by Andy Gambles 12 days ago
90 day SSL certificates
Has anyone heard anything definite about Google wanting to reduce maximum expiry dates to 90 days for SSL certificates? Sectigo and Digicert are the only companies who have mentioned this so far - nothing from Google officially....
Posted by Allen Haigherty 14 days ago
Can't convert CRT to PFX for IIS
Hi,
You kindly supplied me with a .crt file, however, I cannot convert this to a .pfx file, required for IIS, since I do not have a private key for the certificate. I tried your converter and OpenSSL but nothing is working sadly. The certificate is a SAN cert, so covered multiple domains. Are you able to convert it for me?
Best regards,
Liam Young
Posted by Liam Young 6 months ago
Facing a 500 Server Error
Hello,
I'm fulfilling the different steps for a new Sectigo OV SSL wildcard certificate.
I choosed DNS verification, but when pressing Next after Organization page, I'm facing a 500 server Error.
I tried several times and it's always doing the same.
I have to start from scratch after some time, without more success...
Posted by Sebastien GELLENONCOURT 8 months ago
Why was my order cancelled before it was issued?
There are a few reasons why the order may be cancelled before it was issued.
**Not Validated within 90 days**
If the order has not been validated within 90 days of placing the order then it will automatically be cancelled.
**Approver Rejected**
An email approver was sent to approve the certificate issuance. The email recipient has rejected the issuance and so the order has been cancelled.
**Cancelled by User**
The order was cancelled by the user either via the order management page or the API
**How to restart your order or request a refund**
Please refer to the following guidance on how to restart yoru order or request a refund
[Restart Order / Request Refund](https://docs.servertastic.com/docs/cancel-https-order#restart-order)
Orders purchased using points automatically receive a credit for orders cancelled.
Posted by Andy Gambles about 1 year ago
Can I get an EV SSL Wildcard Certificate?
Due to strict validation requirements set down by all Certificate Authorities wildcard EV certificates are not available from any provider.
You can obtain [EV Multi-Domain SSL certificates](https://www.servertastic.com/ssl-multi-domain).
Posted by Andy Gambles over 1 year ago
I need a certificate with CA=True or KeyUsage=CertSign
The above key constraints mean that the certificate is allowed to issue signed certificates. It is not possible to purchase a publicly trusted certificate with these constraints from any Certificate Authority.
If such a certificate were issued it would be possible to sign an end-entity certificate for any domain and it automatically be trusted by browsers.
This creates a significant security risk as the owner of such a certificate could simply just issue a certificate for google.com or paypal.com and inspect all traffic between the user and the server.
The main reason for requiring such a certificate is to install on a firewall type device that performs deep packet inspection. This is essentially performing a Man-in-the-Middle attack on the end user using the firewall by breaking end-to-end encryption for that user.
The only option is to create a self-signed certificate with these key constraints and then add it as a trusted certificate on all the end user devices connecting through the firewall either via a group policy or asking the end users to install the certificate.
Posted by Andy Gambles over 1 year ago
Sectigo SSL OV - 1 year / 2 year certificates
We usually order Sectigo SSL OV certificates for 1 or 2 years due to the short lived nature of some of our sites and the new guidance for the maximum life of a certificate.
But i can no longer find Sectigo SSL OV for 1 or 2 years, have these been removed?
Posted by Allen Haigherty about 2 years ago
Why is my certificate is only valid for 1 year but I purchased for multiple years?
Due to changes implemented by the CA Browser Forum certificates can only have a maximum validity period of 397 days to be trusted by browsers.
You can reissue your certificate multiple times during the life of your certificate plan to obtain the full validity.
For more information please see our guide on [Multi-Year HTTPS Certificates](https://docs.servertastic.com/docs/multi-year-https-certificates)
Posted by Andy Gambles about 2 years ago
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Error can occur when visiting a website even in modern browsers.
Posted by Andy Gambles about 2 years ago