Skip to main content

Troubleshoot client certificate authentication

If you're seeing a Certificate error once signing in with client certificate authentication, the certificate you selected may be invalid or not recognized by your DigiCert® account.

Common reasons for certificate errors

  • Your certificate is expired

    Certificates have a validity period. If it’s expired, contact your admin to reset your 2FA credentials, to allow you to generate a new certificate during your next sign in.

  • You selected the wrong certificate

    You may have selected a certificate that isn’t on your user profile in DigiCert​​®​​ account. Restart the sign in and select the correct certificate.

  • The certificate is disabled or revoked

    This certificate has been blocked. Contact your administrator to check its status or reset your 2FA credentials.

Possible solutions

Here are some solutions to the possible causes of this error:

Issue

You selected the incorrect certificate from your browser to sign in to DigiCert​​®​​ account.

Cause

If you select the wrong certificate during your initial sign in attempt, your browser may cache your selection. On future sign in attempts, the incorrect certificate is selected by default and results in the Certificate error.

Solution

To retry the sign in with the correct certificate:

  • Close and reopen your browser window

  • Clear your browser’s cache

  • Open a new incognito or private browser and attempt to sign in again

If your certificate is expired, lost, or missing, or you’ve forgotten your password, your account administrator can reset two-factor authentication (2FA) for you.

작은 정보

If you’re the administrator contact another admin in your account or DigiCert Support.

Reset client certificate authentication

This procedure allows you to generate a client authentication certificate during their next sign in so that you can regain access to your account.

  1. Sign in to your DigiCert® account.

  2. In the DigiCert® account menu, go to the Access icon.

  3. Select the user's name who needs a new client authentication certificate for 2FA.

  4. Select User credentials.

  5. Select Reset two-factor authentication.

  6. Select Send email.