ASN1 OID field in certificate

[AkosBakos]

Hi Mates,

Is there anybody here who has experience with "ASN1 OID" field in certificates?

I wanted to upload a certificate with this field, as inbound certificate, but the SmarConsole gave me a big error: 

Password is ok, etc, etc

Akos

[PhoneBoy]

I see you've also opened a TAC case already.
It is odd that you said this was an inbound certificate and the error message is about an outbound one.

[AkosBakos]

Hi, yes, but after I clarified that.

[HeikoAnkenbrand]

The error you're encountering when uploading a certificate with an ASN1 OID field as an inbound/outbound certificate in SmartConsole could be due to a few potential issues:

1. Certificate Chain Mismatch: Ensure that the certificate chain is correctly configured. If the certificate chain in the SmartConsole does not match the chain of the server handling the certificate, it can cause errors. You may need to delete the existing Certificate Authority object and create a new one with the updated certificate chain. For more details, you can refer to this solution.

2. Unsupported OID: If the certificate contains an unfamiliar or custom critical extension OID, it might not be supported by the system, leading to verification failures. In such cases, you may need to contact Check Point Support to get a Hotfix that addresses this issue. More information can be found here.

3. Certificate Format: Ensure that the certificate is in the correct format and that all required fields are properly filled. Sometimes, errors can occur if the certificate is not formatted correctly or if there are missing fields.