Search code examples
ssliisprivate-keyca

Private key missing while importing certificate from internal CA

certificate expired in IIS My task to renew it

I created CSR using mmc and using IIS /create certificate request for my internal CA They released to me .cer file. but while I import it to mmc/Certificates/Personal/Certificates there is missing privite key.

And because of missing privite key my IIS server not accepting it. While I import cert dissapeares.

I tried to fix using certuitil -repairstore my xxx looking for some Smart Card not helped.

I even tried to create using openssl same issue no private key.

I already made crazy my CA with my unlimited CSR.

Where I'm doing wrong? Why there is missing private key even I do all operation on the same server Issue from my side or CA?

enter image description here

Solution

  • Funny, My CA incorreclty issued certificate. There was missing 3rd level, They was sending me chain cert, not actual cert.

    I compared below

    enter image description here