Error: "Import Failed:OpenSSL error:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag"

Solution ID:    SO20401    Updated:    05/26/2017

Problem

The following errors may occur during installation on Big IP F5 version 10.1.0 server:
 
Import Failed:OpenSSL error:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

 

Cause

This error is due to a invalid certificate format.

  • Additional or trailing spaces
  • Installing a certificate format other than X.509

Solution

To resolve this issue: 
 

  • Download the X.509 version of the certificate from the RapidSSL portal, see SO16222
  • Make sure the file has no trail or leading spaces within the certificate file.  The file should look like the example below:
     

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

If any spaces or extra lines exist, please manually delete these extra characters. 
  • Make sure Apache was selected during the enrollment, this will issue an X.509 formatted certificate.
     
If your problem persists, it is recommended to replace your certificate. Refer to SO5757 for reissue instructions.

Legacy ID

vs39544

Disclaimer:

RapidSSL has made efforts to ensure the accuracy and completeness of the information in this document. However, RapidSSL makes no warranties of any kind (whether express, implied or statutory) with respect to the information contained herein. RapidSSL assumes no liability to any party for any loss or damage (whether direct or indirect) caused by any errors, omissions, or statements of any kind contained in this document.  Further, RapidSSL assumes no liability arising from the application or use of the product or service described herein and specifically disclaims any representation that the products or services described herein do not infringe upon any existing or future intellectual property rights. Nothing herein grants the reader any license to make, use, or sell equipment or products constructed in accordance with this document. Finally, all rights and privileges related to any intellectual property right described herein are vested in the patent, trademark, or service mark owner, and no other person may exercise such rights without express permission, authority, or license secured from the patent, trademark, or service mark owner. RapidSSL reserves the right to make changes to any information herein without further notice.

Contact Support

US Support:

Order Processing

Technical Support

European Support:

Order Processing

Technical Support

SSL digital certificates sales live chat.

Find Answers


Search Tips