The request's signature does not match its public key.

CSR_SIGNATURE_INVALID · Severity: Error

• ErrorCSR_SIGNATURE_INVALID

  The request's signature does not match its public key.

  A PKCS#10 request is signed with the private key that belongs to the public key it carries, as proof of possession (RFC 2986). A request whose signature fails was changed after signing, and certificate authorities refuse it.

  Recommendation: Create the request again from the private key.

Reported by

• CSR decoder

Available through the API

• CSR decoder API

Related findings

• Warning CSR_NO_SAN The request asks for no host in subject alternative names.

All findings