An error has occured: [2011296] CSR is invalid

This error messgae is typically shown when the field "COMMON NAME" inside the CSR doesn't have a valid value.

You can use our online CSR decoder available under to decode your CSR and check the fields. - A typical valid CSR looks like this:

Country: AT
State: Tyrol
City: Absam
Organisation: Baumgartner New Media GmbH
Common Name (Domain):

It's important that the field "COMMON NAME" is showing the fully qualified domain name (FQDN) for which the SSL certificate will be issued. - For wildcard SSL certificates you have to use the asterisk wildcard placeholder instead of the subdomains, e.g. *

In case you can't resolve the issue, please open a support ticket. Our experienced team will be happy to assist you!

Was this answer helpful?

 Print this Article

Also Read

Windows/IIS/MMC: What do to with "Error HRESULT: 0x80070520"?

In very rare cases this error might show up during installation on Windows Server. The cryptic...

'Broken Certificate Chain' error message

The SSL certificate chain typically consists of:ROOT Certificate INTERMEDIATE Certificate...

Can i redirect non-SNI capable web browsers to an alternative site?

YES, it's possible to redirect non-SNI capable browsers (Internet Explorer auf Windows XP). -...

ASN1 bad tag value met. 0x8009310b

Question: I get CertEnroll::Cx509Enrollment::p_InstallResponse: ASN1 bad tag value met....

Is my X.509 certificate (.CRT) matching my private key and CSR files ? - OpenSSL commands for checking ...

You can use openssl to verify, wheter private-key, .CSR and .CRT are matching together: root@my...