Mysterchr
Member
Here's the quick and dirty of it, our SSL cert signed by our CA has expired. Typically the CA emails the requester before it expires and warns them but the requester was a former employee, his email was disabled when he left and therefore the warnings are well somewhere in email limbo. Nothing we can do about that now only make better choices in the future. But the issue is that now that it has expired I cannot seem to just press the renew button.
I go into IIS 7 on our server 2008 sbs server, in our domain I go to server certificates. I select the expired cert from the center pane and press the renew button on the right. I select "Renew an existing certificate using a ca in my domain" On the next page I select my CA and press finish that's when I get the error "The request has been submitted to the online authority, but was not issued. The request was denied."
So then I go to Certificate Authority in administrative tools. In the failed requests folder I see the failed request. In the request status column it says "A required certificate is not within it's validity period when Verifying against the system clock." Therefore I assume that that means I cannot renew the certificate as it has already expired. Correct? Is there a way around this? I mean without changing the time and date on the system clock of course. I've already considered it.
I go into IIS 7 on our server 2008 sbs server, in our domain I go to server certificates. I select the expired cert from the center pane and press the renew button on the right. I select "Renew an existing certificate using a ca in my domain" On the next page I select my CA and press finish that's when I get the error "The request has been submitted to the online authority, but was not issued. The request was denied."
So then I go to Certificate Authority in administrative tools. In the failed requests folder I see the failed request. In the request status column it says "A required certificate is not within it's validity period when Verifying against the system clock." Therefore I assume that that means I cannot renew the certificate as it has already expired. Correct? Is there a way around this? I mean without changing the time and date on the system clock of course. I've already considered it.
