# Invalid CSR - ZATCA Communication error (Bad Request 400)

**URL:** <https://zatca1.discourse.group/t/invalid-csr-zatca-communication-error-bad-request-400/4073>\
**Category:** Onboarding, renewal and revocation\
**Created:** [November 6, 2024, 12:26pm UTC](https://zatca1.discourse.group/t/invalid-csr-zatca-communication-error-bad-request-400/4073 "2024-11-06T12:26:28Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![muthusamycse](https://avatars.discourse-cdn.com/v4/letter/m/ad7895/32.png) [@muthusamycse](https://zatca1.discourse.group/u/muthusamycse)\
**Post date:** [November 6, 2024, 12:26pm UTC](https://zatca1.discourse.group/t/invalid-csr-zatca-communication-error-bad-request-400/4073/1 "2024-11-06T12:26:28Z")

</div>

Dear,

For Simulation portal, we are trying to generate the CCSID using the power shell script. and getting the error response.

 ![CSID Error](https://europe1.discourse-cdn.com/flex013/uploads/zatca1/original/1X/0ae6b3f778e9450e619c684ee3cbc41efca208f6.jpeg)

**CSRCONFIG**

oid\_section = OIDs  
[OIDs]  
certificateTemplateName = 1.3.6.1.4.1.311.20.2  
[req]  
default\_bits = 2048  
emailAddress = abgzakat@abg.com.sa  
req\_extensions = v3\_req  
x509\_extensions = v3\_ca  
prompt = no  
default\_md = sha 256  
req\_extensions = req\_ext  
distinguished\_name = dn  
[dn]  
C=SA  
OU=Headoffice  
O=Al Blagha Industrial Company  
CN=PREZATCA-Code-Signing  
[v3\_req]  
basicConstraints = CA:FALSE  
keyUsage = digitalSignature, nonRepudiation, keyEncipherment  
[req\_ext]  
certificateTemplateName = ASN1:PRINTABLESTRING:PREZATCACode-Signing  
subjectAltName = dirName:alt\_names  
[alt\_names]  
SN=1-TST|2-TST|3-6ec77209-b72f-4a28-901d-4573d6d04bdc  
UID=300049785700003  
title=1100  
registeredAddress=Riyadh  
businessCategory=Service

---

<div class="post-metadata">

**Author:** ![saalotaibi](https://avatars.discourse-cdn.com/v4/letter/s/f9ae1b/32.png) [@saalotaibi](https://zatca1.discourse.group/u/saalotaibi)\
**Post date:** [November 6, 2024, 12:48pm UTC](https://zatca1.discourse.group/t/invalid-csr-zatca-communication-error-bad-request-400/4073/2 "2024-11-06T12:48:08Z")

</div>

Dear,

Can you please share more details regarding the steps taking from your side on generating the CSR?

If you still encounter issues, please don’t hesitate to reach out with our support team via email:

SP email: sp\_support@zatca.gov.sa

Thanks & Regards,

---

<div class="post-metadata">

**Author:** ![sameer](https://avatars.discourse-cdn.com/v4/letter/s/bbce88/32.png) [@sameer](https://zatca1.discourse.group/u/sameer)\
**Post date:** [November 12, 2024, 7:24am UTC](https://zatca1.discourse.group/t/invalid-csr-zatca-communication-error-bad-request-400/4073/3 "2024-11-12T07:24:00Z")

</div>

@muthusamycse , Is your issue resolved, if so can you tell necessary changes you have done for the resolution.

---

<div class="post-metadata">

**Author:** ![sameer](https://avatars.discourse-cdn.com/v4/letter/s/bbce88/32.png) [@sameer](https://zatca1.discourse.group/u/sameer)\
**Post date:** [November 12, 2024, 7:24am UTC](https://zatca1.discourse.group/t/invalid-csr-zatca-communication-error-bad-request-400/4073/4 "2024-11-12T07:24:08Z")

</div>

@saalotaibi , earlier it was working fine, from last week we are also facing this issue. Can you help identify what changes are required to resolve this issue.

---

<div class="post-metadata">

**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\
**Post date:** [November 12, 2024, 8:22am UTC](https://zatca1.discourse.group/t/invalid-csr-zatca-communication-error-bad-request-400/4073/5 "2024-11-12T08:22:39Z")

</div>

Dear @sameer

Thanks for reaching out,

Can I kindly ask you to elaborate more in your concerns to ensure comprehensive support as usual?

Thanks,  
Ibrahem Daoud.

---

<div class="post-metadata">

**Author:** ![sameer](https://avatars.discourse-cdn.com/v4/letter/s/bbce88/32.png) [@sameer](https://zatca1.discourse.group/u/sameer)\
**Post date:** [November 17, 2024, 2:14pm UTC](https://zatca1.discourse.group/t/invalid-csr-zatca-communication-error-bad-request-400/4073/6 "2024-11-17T14:14:12Z")

</div>

@idaoud , We have provided all the necessary information for onboarding to simulation, but we are still receiving 400 Error code, Invalid CSR response from the API. Below is the configuration information . Please check & advices.  
oid\_section = OIDs  
[OIDs]  
certificateTemplateName= 1.3.6.1.4.1.311.20.2

[req]  
default\_bits = 2048  
emailAddress = it@example.sa  
req\_extensions = v3\_req  
x509\_extensions = v3\_ca  
prompt = no  
default\_md = sha256  
req\_extensions = req\_ext  
distinguished\_name = dn

[v3\_req]  
basicConstraints = CA:FALSE  
keyUsage = digitalSignature, nonRepudiation, keyEncipherment

[req\_ext]  
certificateTemplateName = ASN1:PRINTABLESTRING:PREZATCA-Code-Signing  
subjectAltName = dirName:alt\_names

[dn]  
C=SA # Country Code e.g SA  
OU=INDEPENDENT FOOD COMPANY LTD # Organization Unit Name  
O=INDEPENDENT FOOD COMPANY LTD # Organization Name  
CN=POS487 # Common Name

[alt\_names]  
SN=1-Taxilla|2-IFCLSIM|3-0611240122 # EGS Serial Number 1-ABC|2-PQR|3-XYZ  
UID=310096252500003 # Organization Identifier (VAT Number)  
title=0100 # Invoice Type  
registeredAddress=Riyadh # Address  
businessCategory=Restaurant # Business Category

---

<div class="post-metadata">

**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\
**Post date:** [November 18, 2024, 8:04am UTC](https://zatca1.discourse.group/t/invalid-csr-zatca-communication-error-bad-request-400/4073/7 "2024-11-18T08:04:07Z")

</div>

Morning @sameer

Thanks for reaching out,

Can I kindly ask you to provide the CSR for the above .cnf config data.

Additionally, what are the steps that you followed to generate the CSR?

Thanks,  
Ibrahem Daoud.

---

<div class="post-metadata">

**Author:** ![mhmdAhmd](https://avatars.discourse-cdn.com/v4/letter/m/65b543/32.png) [@mhmdAhmd](https://zatca1.discourse.group/u/mhmdAhmd)\
**Post date:** [December 15, 2024, 9:42am UTC](https://zatca1.discourse.group/t/invalid-csr-zatca-communication-error-bad-request-400/4073/8 "2024-12-15T09:42:37Z")

</div>

Is there any solution found for this problem ???!

---

<div class="post-metadata">

**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\
**Post date:** [December 15, 2024, 9:54am UTC](https://zatca1.discourse.group/t/invalid-csr-zatca-communication-error-bad-request-400/4073/9 "2024-12-15T09:54:21Z")

</div>

Dear @mhmdAhmd

Thanks for reaching out, Welcome to our community.

To provide comprehensive support as usual, can I kindly ask you to share your full concerns about this mentioning all the steps that you followed?

Thanks,  
Ibrahem Daoud.
