# Provided CSR is invalid **URL:** \ **Category:** General\ **Created:** [September 30, 2025, 3:10pm UTC](https://zatca1.discourse.group/t/provided-csr-is-invalid/8548 "2025-09-30T15:10:16Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Shzzamx](https://dub1.discourse-cdn.com/flex013/user_avatar/zatca1.discourse.group/shzzamx/32/480_2.png) [@Shzzamx](https://zatca1.discourse.group/u/Shzzamx)\ **Post date:** [September 30, 2025, 3:10pm UTC](https://zatca1.discourse.group/t/provided-csr-is-invalid/8548/1 "2025-09-30T15:10:16Z")
I am repeatedly facing the issue of “Invalid CSR” every time I try to complete the onboarding process. Each attempt seems to fail for a different reason, and I end up having to make unnecessary adjustments to the CSR file. The same issue occurred when I did the onboarding three months ago, and even before that. It has become a recurring problem that slows down the process unnecessarily. Could you please clarify why this happening now? .this is my .cnf file oid\_section = OIDs [OIDs] certificateTemplateName = 1.3.6.1.4.1.311.20.2 [req] default\_bits = 2048 emailAddress =n@mail.com.sa req\_extensions = v3\_req x509\_extensions = v3\_ca prompt = no default\_md = sha 256 req\_extensions = req\_ext distinguished\_name = dn [dn] C=SA OU=xxxxxx O=Company CN=xxxxxx [v3\_req] basicConstraints = CA:FALSE keyUsage = digitalSignature,nonRepudiation,keyEncipherment [req\_ext] certificateTemplateName = ASN1:PRINTABLESTRING:ZATCA-Code-Signing subjectAltName = dirName:alt\_names [alt\_names] SN=1-GRN|2-MCT|3-a6bc16f3-9bd6-4612-a4ce-17415e46ea4d UID=xxxxxxxxxxxxxx title=1100 registeredAddress=xxxxxx businessCategory=Consumer Goods and these are the ssl commands 1- Create private key openssl ecparam -name secp256k1 -genkey -noout -out ec-secp256k1-priv-key.pem 2- Create public key openssl ec -in ec-secp256k1-priv-key.pem -pubout \> ec-secp256k1-pub-key.pem 3- Create CSR openssl req -new -sha256 -key ec-secp256k1-priv-key.pem -extensions v3\_req -config config.cnf -out my.csr ---
**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\ **Post date:** [October 1, 2025, 6:56am UTC](https://zatca1.discourse.group/t/provided-csr-is-invalid/8548/2 "2025-10-01T06:56:49Z")
Morning @Shzzamx Thanks for reaching out, To provide comprehensive support as usual, can I kindly ask you to elaborate with the below: 1. Is it in simulation, or production? 2. What is the openSSL version that you are using? Thanks, Ibrahem Daoud. ---
**Author:** ![Shzzamx](https://dub1.discourse-cdn.com/flex013/user_avatar/zatca1.discourse.group/shzzamx/32/480_2.png) [@Shzzamx](https://zatca1.discourse.group/u/Shzzamx)\ **Post date:** [October 1, 2025, 8:33am UTC](https://zatca1.discourse.group/t/provided-csr-is-invalid/8548/3 "2025-10-01T08:33:59Z")
@idaoud Morning Ibrahem, Thanks for your response. I am currently working in **Production** environment. The OpenSSL version I am using is **OpenSSL 3.4.0 2 Oct 2024** Please let me know if you need any further details from my side. ---
**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\ **Post date:** [October 1, 2025, 10:34am UTC](https://zatca1.discourse.group/t/provided-csr-is-invalid/8548/4 "2025-10-01T10:34:40Z")
Dear @Shzzamx Kindly share the full payload via below mail: SP mail: [sp\_support@zatca.gov.sa](mailto:sp_support@zatca.gov.sa) Additionally, please share here the email address you will reach out to our technical team from. Thanks, Ibrahem Daoud. ---
**Author:** ![Shzzamx](https://dub1.discourse-cdn.com/flex013/user_avatar/zatca1.discourse.group/shzzamx/32/480_2.png) [@Shzzamx](https://zatca1.discourse.group/u/Shzzamx)\ **Post date:** [October 2, 2025, 7:45am UTC](https://zatca1.discourse.group/t/provided-csr-is-invalid/8548/5 "2025-10-02T07:45:12Z")
Below is my email address and i will share the full payload with you on your provided email email: [chshahzaman.mazher@gmail.com](mailto:chshahzaman.mazher@gmail.com)