Binding the certificate gives error "certificate is not a server certificate"

Binding the certificate gives error "certificate is not a server certificate"

book

Article ID: CTX217312

calendar_today

Updated On:

Description

While binding the certificate you  might get the error "certificate is not a server certificate".

Resolution





This issue happens if certificate was installed without key as shown below:

 

 

 

 

The correct server certificate looks like the below screenshot:


 

To fix this issue you need to install the certificate with the correct key.

Note : Please use SSL dashboard to verify the health and monitor SSL certificates


Problem Cause

If the correct key is not associated with the Certificate then ADC does not consider it as the Server certificate.

 

Without the Key file ADC consider the certificate as Root or Intermediate that cannot be bound to the Server as they do not have the private key of certificate which is required for SSL Handshake when key exchange happens to secure the connection.

Additional Information

Referance :-https://developer-docs.citrix.com/projects/citrix-adc-command-reference/en/latest/ssl/ssl-certKey/#add-ssl-certkey