Guest themoelman Posted February 11, 2008 Posted February 11, 2008 setting up a 3 teired CA chain and getting this error when trying to get cert from SubCA to Issuing CA: Certificate not issued (denied) error constructing or publishing certificate. The certificate validity period will be shorter than the SubCA Certificate Template specifies, because the template validity period is longer than the maximum certificate validity period allowed by the CA. Consider renewing the CA certificate, reducing the template validity pereiod, or increasing the registry validity period. The re-issuing of cert isn't needed - I did that fine and still get error.
Guest themoelman Posted February 11, 2008 Posted February 11, 2008 RE: CA Server chain won't issue cert to Issuing CA Update: every time I try to reissue the cert from the ca - by going to action- all tasks-renew CA certificate and it still issues 5 years. Do I have to reinstall the CA? "themoelman" wrote: > setting up a 3 teired CA chain and getting this error when trying to get cert > from SubCA to Issuing CA: Certificate not issued (denied) error constructing > or publishing certificate. The certificate validity period will be shorter > than the SubCA Certificate Template specifies, because the template validity > period is longer than the maximum certificate validity period allowed by the > CA. Consider renewing the CA certificate, reducing the template validity > pereiod, or increasing the registry validity period. > > The re-issuing of cert isn't needed - I did that fine and still get error. >
Recommended Posts