Invalid CSR - ZATCA Communication error (Bad Request 400)

Onboarding, renewal and revocation
1

Dear,

For Simulation portal, we are trying to generate the CCSID using the power shell script. and getting the error response.

CSID Error
CSID Error924×386 65.8 KB

CSRCONFIG

oid_section = OIDs
[OIDs]
certificateTemplateName = 1.3.6.1.4.1.311.20.2
[req]
default_bits = 2048
emailAddress = abgzakat@abg.com.sa
req_extensions = v3_req
x509_extensions = v3_ca
prompt = no
default_md = sha 256
req_extensions = req_ext
distinguished_name = dn
[dn]
C=SA
OU=Headoffice
O=Al Blagha Industrial Company
CN=PREZATCA-Code-Signing
[v3_req]
basicConstraints = CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment
[req_ext]
certificateTemplateName = ASN1:PRINTABLESTRING:PREZATCACode-Signing
subjectAltName = dirName:alt_names
[alt_names]
SN=1-TST|2-TST|3-6ec77209-b72f-4a28-901d-4573d6d04bdc
UID=300049785700003
title=1100
registeredAddress=Riyadh
businessCategory=Service

2

Dear,

Can you please share more details regarding the steps taking from your side on generating the CSR?

If you still encounter issues, please don’t hesitate to reach out with our support team via email:

SP email: sp_support@zatca.gov.sa

Thanks & Regards,

3

@muthusamycse , Is your issue resolved, if so can you tell necessary changes you have done for the resolution.

4

@saalotaibi , earlier it was working fine, from last week we are also facing this issue. Can you help identify what changes are required to resolve this issue.

5

Dear @sameer

Thanks for reaching out,

Can I kindly ask you to elaborate more in your concerns to ensure comprehensive support as usual?

Thanks,
Ibrahem Daoud.

6

@idaoud , We have provided all the necessary information for onboarding to simulation, but we are still receiving 400 Error code, Invalid CSR response from the API. Below is the configuration information . Please check & advices.
oid_section = OIDs
[ OIDs ]
certificateTemplateName= 1.3.6.1.4.1.311.20.2

[ req ]
default_bits = 2048
emailAddress = it@example.sa
req_extensions = v3_req
x509_extensions = v3_ca
prompt = no
default_md = sha256
req_extensions = req_ext
distinguished_name = dn

[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment

[req_ext]
certificateTemplateName = ASN1:PRINTABLESTRING:PREZATCA-Code-Signing
subjectAltName = dirName:alt_names

[ dn ]
C=SA # Country Code e.g SA
OU=INDEPENDENT FOOD COMPANY LTD # Organization Unit Name
O=INDEPENDENT FOOD COMPANY LTD # Organization Name
CN=POS487 # Common Name

[alt_names]
SN=1-Taxilla|2-IFCLSIM|3-0611240122 # EGS Serial Number 1-ABC|2-PQR|3-XYZ
UID=310096252500003 # Organization Identifier (VAT Number)
title=0100 # Invoice Type
registeredAddress=Riyadh # Address
businessCategory=Restaurant # Business Category

7

Morning @sameer

Thanks for reaching out,

Can I kindly ask you to provide the CSR for the above .cnf config data.

Additionally, what are the steps that you followed to generate the CSR?

Thanks,
Ibrahem Daoud.

8

Is there any solution found for this problem ???!

9

Dear @mhmdAhmd

Thanks for reaching out, Welcome to our community.

To provide comprehensive support as usual, can I kindly ask you to share your full concerns about this mentioning all the steps that you followed?

Thanks,
Ibrahem Daoud.