# {"errorCode":"400","errorCategory":"Invalid-CSR","errorMessage":"The provided Certificate Signing Request (CSR) is invalid."} production env

**URL:** <https://zatca1.discourse.group/t/errorcode-400-errorcategory-invalid-csr-errormessage-the-provided-certificate-signing-request-csr-is-invalid-production-env/8639>\
**Category:** Onboarding, renewal and revocation\
**Created:** [October 12, 2025, 7:43am UTC](https://zatca1.discourse.group/t/errorcode-400-errorcategory-invalid-csr-errormessage-the-provided-certificate-signing-request-csr-is-invalid-production-env/8639 "2025-10-12T07:43:49Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![itforless](https://avatars.discourse-cdn.com/v4/letter/i/f07891/32.png) [@itforless](https://zatca1.discourse.group/u/itforless)\
**Post date:** [October 12, 2025, 7:43am UTC](https://zatca1.discourse.group/t/errorcode-400-errorcategory-invalid-csr-errormessage-the-provided-certificate-signing-request-csr-is-invalid-production-env/8639/1 "2025-10-12T07:43:49Z")

</div>

================================================================================

[2025-10-09 20:56:06] ZATCA API CALL

================================================================================

URL: [https://gw-fatoora.zatca.gov.sa/e-invoicing/core/compliance](https://gw-fatoora.zatca.gov.sa/e-invoicing/core/compliance)

METHOD: POST

HTTP CODE: 400

================================================================================

REQUEST HEADERS:

Array

(

[0] =\> Accept: application/json

[1] =\> Content-Type: application/json

[2] =\> Accept-Version: V2

[3] =\> OTP:

)

================================================================================

REQUEST PAYLOAD:

{

“csr”: “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”

}

================================================================================

RESPONSE BODY:

{“errorCode”:“400”,“errorCategory”:“Invalid-CSR”,“errorMessage”:“The provided Certificate Signing Request (CSR) is invalid.”}

================================================================================

iam on production env iam coding on php  
any help please

---

<div class="post-metadata">

**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\
**Post date:** [October 13, 2025, 7:01am UTC](https://zatca1.discourse.group/t/errorcode-400-errorcategory-invalid-csr-errormessage-the-provided-certificate-signing-request-csr-is-invalid-production-env/8639/2 "2025-10-13T07:01:51Z")

</div>

Dear @itforless

Thanks for reaching out, Welcome to our community.

To provide comprehensive support as usual, can I kindly ask you to mention the exact steps you followed to generate your CSR?

Thanks,  
Ibrahem Daoud.