Why do I get an ‘Invalid CSR’ error message when I try to activate?

There are many reasons why a CSR may be invalid. When you create the CSR make sure:

  1. Your domain is hosted. This should not be intranet site.
  2. Check the common name field. You may have specified an IP address (e.g. or a server name (e.g. mywebserver) instead of a Fully Qualified Domain Name such as www.mydomain.com or domain name such as mydomain.com. You must specify a Fully Qualified Domain Name or domain name.
  3. Make sure you did not use any special characters when filling in the information required for CSR generation. Special characters are [! @ # $ % ^ ( ) ~ ? > < & / \ , . " ' _]
  4. Check the country field. If you are located in the United Kingdom, do not specify your country code when generating the CSR as "UK".It must be "GB".
  5. Make sure you have included the header and footer of the CSR into the enrollment form. The header and footer will look like:

encoded data
Make sure that there are 5 dashes on each side of Begin and End certificate request. There should also be no trailing spaces in the CSR.

  • 0 Users Found This Useful
Was this answer helpful?

Related Articles

How to order an SSL certificate?

Simply visit www.garanntor.com/ssl-certificate and choose any of the SSL certificates and click...

I mistyped the common name when activating the SSL certificate. Can it be changed?

Unfortunately, this cannot be changed. However, we have a 5 days refund policy for SSL...

Why can’t you send the approved email to my personal mail id?

Please note that the certificate authority needs an explicit approval from a domain owner to...

How to install let’s encrypt SSL

To install Let's Encrypt SSL on your website through cpanel using, follow the steps below Step 1...

I did not setup a valid mailbox for the approved email address during activation. Can you resend it?

Once you have set up the right email address, send a mail to support@garanntor.com or contact...