At least one certificate is not valid (Certificate failed validation because it could not be loaded).

Question

At least one certificate is not valid (Certificate failed validation because it could not be loaded).

Braun, Andrew T 0

Every time I attempt to add my ZeroSSL Certificate onto my Azure Webservice it completely fails.

"At least one certificate is not valid (Certificate failed validation because it could not be loaded)."

Note that clicking "Validate" is successful, but clicking "Add" fails.

To create my SSL PFX file using OpenSSL, I'm doing the following steps:

Combine the certificate and CA bundle into a single file. Open the certificate.crt and ca_bundle.crt files in a text editor and copy the contents of ca_bundle.crt at the end of certificate.crt

Save the combined crt as certificate-chain.crt

Run the following command in Ubuntu 22.04 LTS (Ubuntu in Windows 10 VM feature):

openssl pkcs12 -export -out certificate.pfx -inkey private.key -in certificate-chain.crt

This generates a certificate.pfx file I attempt to use, and it fails.

What am I doing wrong?

pic_related

Grmacjon-MSFT 19,301 Reputation points Moderator

2023-05-18T04:22:39.8966667+00:00
Hi @Braun, Andrew T we are sorry to hear you're facing this issue. There could be a few things causing this error. please refer to this troubleshooting tips shared in this similar SO thread. Please make sure your certificate must meet the following requirements:

Exported as a password-protected PFX file, encrypted using triple DES.

Contains private key at least 2048 bits long

Contains all intermediate certificates and the root certificate in the certificate chain.

Also, keep in mind that "contributor" role at the Azure subscription level is needed.

Hope that helps.

-Grace
Braun, Andrew T 0 Reputation points

2023-05-18T05:13:59.1666667+00:00
I have validated the following:

Exported as a password-protected PFX file, encrypted using triple DES.

Contains private key at least 2048 bits long

Contains all intermediate certificates and the root certificate in the certificate chain.

l am also the owner of the Web / App Service Project here, so I have the necessary permissions that at least contributor role would have.
Braun, Andrew T 0 Reputation points

2023-05-18T05:15:09.8333333+00:00
I am the owner of the App Service, so I have at least or more permissions than that is given in contributor role.

I have successfully verified that the other requirements are met:

Exported as a password-protected PFX file, encrypted using triple DES.

Contains private key at least 2048 bits long

Contains all intermediate certificates and the root certificate in the certificate chain.

1 answer

Your answer

Grmacjon-MSFT 19,301 Reputation points Moderator

2023-05-18T04:22:39.8966667+00:00

Hi @Braun, Andrew T we are sorry to hear you're facing this issue. There could be a few things causing this error. please refer to this troubleshooting tips shared in this similar SO thread. Please make sure your certificate must meet the following requirements:

Exported as a password-protected PFX file, encrypted using triple DES.

Contains private key at least 2048 bits long

Contains all intermediate certificates and the root certificate in the certificate chain.

Also, keep in mind that "contributor" role at the Azure subscription level is needed.

Hope that helps.

-Grace
Braun, Andrew T 0 Reputation points

2023-05-18T05:13:59.1666667+00:00

I have validated the following:

Exported as a password-protected PFX file, encrypted using triple DES.

Contains private key at least 2048 bits long

Contains all intermediate certificates and the root certificate in the certificate chain.

l am also the owner of the Web / App Service Project here, so I have the necessary permissions that at least contributor role would have.
Braun, Andrew T 0 Reputation points

2023-05-18T05:15:09.8333333+00:00

I am the owner of the App Service, so I have at least or more permissions than that is given in contributor role.

I have successfully verified that the other requirements are met:

Exported as a password-protected PFX file, encrypted using triple DES.

Contains private key at least 2048 bits long

Contains all intermediate certificates and the root certificate in the certificate chain.

Answer 1

Hi @Braun, Andrew T ,

Apologies for the delay in response. If you're still facing this issue, please send us an email so we can investigate this issue further. Send an email to AzCommunity[at]Microsoft[dot]com with the below details, so that we can enable a one-time-free support for you to work closely on this issue.

Email subject: <Attn - Grace >

Thread URL: <Microsoft Q&A Thread>

Subscription ID: <your Azure subscription id>

Please let me know here once the email is sent along with above requested details.

Thanks,

Grace

Share via

At least one certificate is not valid (Certificate failed validation because it could not be loaded).

1 answer

Your answer