CA Server chain won't issue cert to Issuing CA

[Guest themoelman]

setting up a 3 teired CA chain and getting this error when trying to get cert

from SubCA to Issuing CA: Certificate not issued (denied) error constructing

or publishing certificate. The certificate validity period will be shorter

than the SubCA Certificate Template specifies, because the template validity

period is longer than the maximum certificate validity period allowed by the

CA. Consider renewing the CA certificate, reducing the template validity

pereiod, or increasing the registry validity period.

 

The re-issuing of cert isn't needed - I did that fine and still get error.

[Guest themoelman]

RE: CA Server chain won't issue cert to Issuing CA

 

Update: every time I try to reissue the cert from the ca - by going to action-

all tasks-renew CA certificate and it still issues 5 years. Do I have to

reinstall the CA?

 

"themoelman" wrote:

> setting up a 3 teired CA chain and getting this error when trying to get cert

> from SubCA to Issuing CA: Certificate not issued (denied) error constructing

> or publishing certificate. The certificate validity period will be shorter

> than the SubCA Certificate Template specifies, because the template validity

> period is longer than the maximum certificate validity period allowed by the

> CA. Consider renewing the CA certificate, reducing the template validity

> pereiod, or increasing the registry validity period.

>

> The re-issuing of cert isn't needed - I did that fine and still get error.

>