The CSR cannot be decoded or is invalid

The CSR must contain a minimum of the following fields:

  • Organization
  • Organizational Unit
  • Locality (City)
  • State/Province
  • Country (2 character code)
  • Common Name (Fully Qualified Domain Name)

Another possibility is that the CSR contains non-alphanumeric characters in the required fields.

Make sure your CSR begins with 5 dashs and ends with 5 dashs as below:
-----BEGIN NEW CERTIFICATE REQUEST-----
-----END NEW CERTIFICATE REQUEST-----

  • Also, please check for additional characters that may have been picked up by accident, possibly through cutting and pasting.
  • Below is an example where the additional characters (the '!' and the 'space' underlined and highlighted in red) will cause a CSR decoding error.
  • Normally, a CSR that contains characters such as '?', '@', '#', '$', '%', '^', '&' and '*' will cause issues.
  • The only allowable non-alphanumeric character is the backslash '\\'.


-----BEGIN NEW CERTIFICATE REQUEST-----
MIID9zCCA2ACAQAwgZkxIjAgBgNVBAMTGXd3dy5jaGFybWluZ2NyZWF0dXJlcy5j
SNwpzdKDPBvg/6OuXtUhnEswEwYD! VR0lBAwwCgYIKwYBBQUHAwEwgf8GCisGAQQB
kZxM7dGe7oEAck4U9v0adssFO2VlpxOBRpVhCV59Wy8GmiVCs8LCSqxHeHpmv8v0
-----END NEW CERTIFICATE REQUEST-----

If the suggestions above do not resolve the issue, please send your CSR to our support team and we will be happy to decode it and help you to identify the problem, or instruct you to generate a new one if necessary.