Home
CERT+
Automate certificate lifecycle management including issuance, discovery, renewal, and deployment, across public and private trust CAs. Assess, prioritize, and plan your migration to quantum-safe encryption with the Quantum Trust Hub add-on module.
CERT+ Troubleshooting Guide
Troubleshooting for CAs
Troubleshooting for DigiCert CA Issues

CERT+
Automate certificate lifecycle management including issuance, discovery, renewal, and deployment, across public and private trust CAs. Assess, prioritize, and plan your migration to quantum-safe encryption with the Quantum Trust Hub add-on module.
PKI+
Provision, govern and scale private trust certificates with a Post Quantum ready cloud based Enterprise PKI-as-a-Service.
SIGN+
Secure software, firmware, and containers with a comprehensive enterprise code signing solution.
SSH+
Control SSH access and key rotation at scale with an SSH key lifecycle management solution.
KUBE+
Unify DevOps and Security teams by managing certificates with a Kubernetes-native certificate lifecycle management solution.
DDI+
Manage domain registration, renewal, decommissioning, and other security controls with an end-to-end domain lifecycle management solution.
ADC+
Automate and orchestrate application delivery infrastructure at scale with an ADC lifecycle automation platform.
Platform
Manage policy and automation across all of the products and modules in the AVX ONE platform.
AppViewX Setup
Get detailed instructions for setting up AVX ONE in on-premises or SaaS deployments.
Release Artifacts
Review new features, fixes, and security advisories with official AppViewX release documentation.

Troubleshooting for DigiCert CA Issues

This section helps you troubleshoot the common problems that you might encounter when using Digicert CA functionalities like setting addition, certificate enrollment, renewal, revocation, suspension, reinstating, and discovery.

Supported Web Browsers

Table 1. Supported Web Browsers
Browser	Version	Notes
Firefox	Till latest (Version 84.0.4147.135)	NA
Chrome	Till latest (Version 80.0)	NA
IE	Limited support in 9, Full support from 10+	No support for IE9 post-AppViewX Version 11.0
Safari	Till latest (Windows - Version 5.1.7, macOS - Version 13.1.2)	From AppViewX Version 11.1
Opera	Till latest (Version 70)	From AppViewX Version 11.1

Supported Devices

Table 2. Supported Devices
Device	OS	Resolution
Desktop	Windows	1024 X 768 onwards, 1366x768, 1920x1080, Higher
Desktop	Linux	1024 X 768 onwards, 1366x768, 1920x1080, Higher
Desktop	Mac	1024 X 768 onwards, 1366x768, 1920x1080, Higher
iPad	iOS	1024 X 768

Issues in Configuring DigiCert CA

Table 3. Error messages and resolutions
Error Message	Possible Cause	Possible Solution
Unable to save CA settings CA Settings name already exists.	A CA setting with the same name for Digicert already exists in inventory.	Check the CA Setting name, it should be unique.
Fetch certificate types action has failed Connection failed due to incorrect CA settings details	Please check the Service URL or API Access key.	Verify the service URL configured: Sample URL: https://www.digicert.com/services/v2/.
Fetch certificate types action has failed Access denied due to missing permission.	Access Key may be wrong or may not have enough authorization.	Verify the Access key and check its API authorization, it should be set as none.
Fetch certificate types action has failed Proxy details is not configured in proxy settings	Proxy details might have not been configured.	Configure valid proxy details.
Unable to establish connection with CA	The configured CA details may be incorrect.	Check the CA details configured on the CA settings page.
	Proxy details may not be configured.	heck whether proxy details are configured in proxy settings.
	AppViewX may not be able to reach CA.	Check whether network access is available.
Unable to establish connection, Please ensure Proxy/Internet connectivity.	Invalid proxy details.	Please check the proxy details provided.
	Internet connectivity may not be available.	Please check Internet connectivity to reach CA.
	Invalid URL provided in CA Settings.	Please check whether a valid CA URL is provided in CA Settings or contact AppViewX Support.

Issues in Enrolling a DigiCert Certificate

Table 4. Error messages and resolutions
Error Message	Possible Cause	Possible Solution
Unable to submit the CSR request to certificate authority.-Invalid organization name provided.	Organization information provided might not be available in the CA account.	Please check the list of organizations available in the CA settings.
Unable to establish connection with CA	The configured CA details may be incorrect.	Check the CA details configured on the CA settings page.
	Proxy details may not be configured.	heck whether proxy details are configured in proxy settings.
	AppViewX may not be able to reach CA.	Check whether network access is available.

Issues in Renewing a DigiCert Certificate

Table 5. Error messages and resolutions
Error Message	Possible Cause	Possible Solution
Please provide a valid order Id of the certificate.	OrderId may be incorrect to perform CLM action in Digicert	Verify the orderid of the certificate from the Digicert CA account.
You must select a Certificate Authority to issue the certificate from	The CA certificateId may be incorrect.	Provide the valid ID of the intermediate certificate authority (ICA) certificate to select as the issuing certificate.
Unable to establish connection with CA	The configured CA details may be incorrect.	Check the CA details configured on the CA settings page.
	Proxy details may not be configured.	heck whether proxy details are configured in proxy settings.
	AppViewX may not be able to reach CA.	Check whether network access is available.

Issues in Regenerating a DigiCert CA Certificate

Table 6. Error messages and resolutions
Error Message	Possible Cause	Possible Solution
Unable to submit the CSR request to certificate authority.-Invalid organization name provided.	Organization information provided might not be available in the CA account.	Please check the list of organizations available in the CA settings.
Unable to establish connection with CA	The configured CA details may be incorrect.	Check the CA details configured on the CA settings page.
	Proxy details may not be configured.	heck whether proxy details are configured in proxy settings.
	AppViewX may not be able to reach CA.	Check whether network access is available.

Issues in Revoking a DigiCert certificate

Table 7. Error messages and resolutions
Error Message	Possible Cause	Possible Solution
Error while revoking certificate-The specified order was not found.	The order id provided in the connector might be wrong.	Check the orderId for the certificate in Digicert CA Portal.
Error while revoking certificate-Order Id not provided to get corresponding certificate Id.	orderid is not provided for the action	Provide a valid order id to proceed with the action.
You must select a Certificate Authority to issue the certificate from	The CA certificateId may be incorrect.	Provide the valid ID of the intermediate certificate authority (ICA) certificate to select as the issuing certificate.
Unable to establish connection with CA	The configured CA details may be incorrect.	Check the CA details configured on the CA settings page.
	Proxy details may not be configured.	heck whether proxy details are configured in proxy settings.
	AppViewX may not be able to reach CA.	Check whether network access is available.

Issues in Duplicating DigiCert CA Certificate

Table 8. Error messages and resolutions
Error Message	Possible Cause	Possible Solution
Duplicate action not supported for DNS names	The DNS name is not listed in the parent certificate's Subject Alternative Names (SAN) list.	To duplicate a certificate with the common name as the DNS name, ensure that the DNS name is listed in the parent certificate's Subject Alternative Names (SAN) list. Note: This functionality is enabled only for select certificate types. For the list of certificate types supported for this functionality, click here. To add a new SAN name for a DigiCert certificate that is not listed for the parent certificate, reissue the certificate with the new DNS name and then perform the certificate duplication action using the newly added DNS name.

Issues in Discovering DigiCert CA Certificates

Table 9. Error messages and resolutions
Error Message	Possible Cause	Possible Solution
Unable to establish connection with CA	The configured CA details may be incorrect.	Check the CA details configured on the CA settings page.
	Proxy details may not be configured.	heck whether proxy details are configured in proxy settings.
	AppViewX may not be able to reach CA.	Check whether network access is available.
Service unavailable, please limit request volume	DigiCert throws a service unavailable error, please limit request volume when: 1000+ continuous requests fired, So with buffer to enroll certificates, 900 certificate requests only be fired in a batch	AppViewX CERT+ discovery automatically handles it by introducing a delay of 50 minutes between each 900 requests.

AppViewX