# Simulation The provided Certificate Signing Request (CSR) is invalid **URL:** \ **Category:** Clearance and Reporting\ **Created:** [February 6, 2025, 11:33am UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657 "2025-02-06T11:33:09Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![farhan06](https://avatars.discourse-cdn.com/v4/letter/f/35a633/32.png) [@farhan06](https://zatca1.discourse.group/u/farhan06)\ **Post date:** [February 6, 2025, 11:33am UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/1 "2025-02-06T11:33:09Z")
On Simulation Getting The provided Certificate Signing Request (CSR) is invalid. ON Getting PCSID from the third API. 1 . Making CSR 2. Getting CSID Successfully (if My CSR is wrong it should show error in this step). 3. Submitting Compliance Invoices for Simplified Invoices and also done debit and credit note on same base64 decoded BinaryToken 4. When I want to generate PCSID by using request\_id(getting from compliance) I m facing that error. ---
**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\ **Post date:** [February 6, 2025, 1:00pm UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/2 "2025-02-06T13:00:18Z")
Dear @farhan06 Thanks for reaching out, To provide comprehensive support as usual, Can I kindly ask you to share your CSR? Thanks, Ibrahem Daoud. ---
**Author:** ![farhan06](https://avatars.discourse-cdn.com/v4/letter/f/35a633/32.png) [@farhan06](https://zatca1.discourse.group/u/farhan06)\ **Post date:** [February 6, 2025, 1:09pm UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/3 "2025-02-06T13:09:41Z")
@idaoud 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 ---
**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\ **Post date:** [February 6, 2025, 1:27pm UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/4 "2025-02-06T13:27:44Z")
Dear @farhan06 Thanks for your collaboration, Kindly Note that this was a known issue and it already resolved, If you are still facing the same response please share your config file or your .cnf file through the below mail. SP mail: [sp\_support@zatca.gov.sa](mailto:sp_support@zatca.gov.sa) Thanks, Ibrahem Daoud. ---
**Author:** ![farhan06](https://avatars.discourse-cdn.com/v4/letter/f/35a633/32.png) [@farhan06](https://zatca1.discourse.group/u/farhan06)\ **Post date:** [February 6, 2025, 1:38pm UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/5 "2025-02-06T13:38:06Z")
@idaoud Email sent, please check. Also, if the issue is already resolved, why am I still getting it? If the CSR is incorrect, it should return an error on the first CSID check. This is also my question. ---
**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\ **Post date:** [February 6, 2025, 2:01pm UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/6 "2025-02-06T14:01:47Z")
Dear @farhan06 Kindly note that as I mentioned the issue already resolved, Additionally, we will review the mail and get back to you, the main purpose of sharing the details via mail is to do our investigation and schedule one to one meeting if needed. Thanks for your understanding. Ibrahem Daoud. ---
**Author:** ![eCloud](https://dub1.discourse-cdn.com/flex013/user_avatar/zatca1.discourse.group/ecloud/32/629_2.png) [@eCloud](https://zatca1.discourse.group/u/eCloud)\ **Post date:** [February 6, 2025, 4:18pm UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/7 "2025-02-06T16:18:35Z")
@farhan06 You need to pay attention to the order of the **Subject** in your CSR. make sure it follows the format as generated by the SDK. Then the most important thing is in the Template section **Request Extension** , you are missing the character “ **-** ” in **PREZATCA-Code-Signing**. Maybe this is the cause of the Invalid CSR at the time of the PCSID Request. ![image](https://europe1.discourse-cdn.com/flex013/uploads/zatca1/original/1X/7241e16b090027feae20f2fd8d39c991c2afbe7a.png) ---
**Author:** ![farhan06](https://avatars.discourse-cdn.com/v4/letter/f/35a633/32.png) [@farhan06](https://zatca1.discourse.group/u/farhan06)\ **Post date:** [February 9, 2025, 9:29am UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/8 "2025-02-09T09:29:28Z")
Hi Fatoora Developer Team, Now I am getting PCSID Successfully on simulation, But I am using Arabic while generating CSR so in the simulation portal it is showing like in the given image below . I am also attaching my cnf file.can you please check it. And at reporting(invoices/reporting/single) on the last step facing warning X509Certificate (CCSID / PCSID) used for signing is not valid certificate (CCSID / PCSID) for this VAT Registration Number. ![image.png](https://europe1.discourse-cdn.com/flex013/uploads/zatca1/original/1X/d0dce7735e7f07e1e7593a370e65449bdeb8d90a.png) (Attachment 01c78533-73be-43b0-aef4-fce639b75d9f.cnf is missing) ---
**Author:** ![farhan06](https://avatars.discourse-cdn.com/v4/letter/f/35a633/32.png) [@farhan06](https://zatca1.discourse.group/u/farhan06)\ **Post date:** [February 9, 2025, 9:37am UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/9 "2025-02-09T09:37:30Z")
@idaoud can you check please ---
**Author:** ![bahaeddine](https://avatars.discourse-cdn.com/v4/letter/b/3ec8ea/32.png) [@bahaeddine](https://zatca1.discourse.group/u/bahaeddine)\ **Post date:** [February 9, 2025, 11:58am UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/10 "2025-02-09T11:58:01Z")
@farhan06 are you using openssl command to generate csr file ? if yes, share the command please ---
**Author:** ![farhan06](https://avatars.discourse-cdn.com/v4/letter/f/35a633/32.png) [@farhan06](https://zatca1.discourse.group/u/farhan06)\ **Post date:** [February 9, 2025, 12:01pm UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/11 "2025-02-09T12:01:55Z")
``` $result = shell_exec("openssl req -new -sha256 -key $private_key_file_name -config $csr_config_file_name 2>&1"); ``` ---
**Author:** ![bahaeddine](https://avatars.discourse-cdn.com/v4/letter/b/3ec8ea/32.png) [@bahaeddine](https://zatca1.discourse.group/u/bahaeddine)\ **Post date:** [February 9, 2025, 12:07pm UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/12 "2025-02-09T12:07:29Z")
@farhan06 try to add this before -config (-extensions v3\_req -utf8) ---
**Author:** ![farhan06](https://avatars.discourse-cdn.com/v4/letter/f/35a633/32.png) [@farhan06](https://zatca1.discourse.group/u/farhan06)\ **Post date:** [February 9, 2025, 12:36pm UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/13 "2025-02-09T12:36:29Z")
This will solve this issue ? ---
**Author:** ![bahaeddine](https://avatars.discourse-cdn.com/v4/letter/b/3ec8ea/32.png) [@bahaeddine](https://zatca1.discourse.group/u/bahaeddine)\ **Post date:** [February 9, 2025, 12:49pm UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/14 "2025-02-09T12:49:24Z")
@farhan06 Hopefully Inchallah ---
**Author:** ![farhan06](https://avatars.discourse-cdn.com/v4/letter/f/35a633/32.png) [@farhan06](https://zatca1.discourse.group/u/farhan06)\ **Post date:** [February 10, 2025, 8:47am UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/15 "2025-02-10T08:47:40Z")
i am still getting this on reporting with pcsid X509Certificate (CCSID / PCSID) used for signing is not valid certificate (CCSID / PCSID) for this VAT Registration Number ---
**Author:** ![bahaeddine](https://avatars.discourse-cdn.com/v4/letter/b/3ec8ea/32.png) [@bahaeddine](https://zatca1.discourse.group/u/bahaeddine)\ **Post date:** [February 10, 2025, 9:02am UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/16 "2025-02-10T09:02:04Z")
@farhan06 on simulation or sandbox mode ? ---
**Author:** ![farhan06](https://avatars.discourse-cdn.com/v4/letter/f/35a633/32.png) [@farhan06](https://zatca1.discourse.group/u/farhan06)\ **Post date:** [February 10, 2025, 9:12am UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/17 "2025-02-10T09:12:50Z")
@bahaeddine on simulation ---
**Author:** ![farhan06](https://avatars.discourse-cdn.com/v4/letter/f/35a633/32.png) [@farhan06](https://zatca1.discourse.group/u/farhan06)\ **Post date:** [February 10, 2025, 9:13am UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/18 "2025-02-10T09:13:42Z")
@bahaeddine but that Arabic issue is solved by using your command suggestion ---
**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\ **Post date:** [February 10, 2025, 9:24am UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/19 "2025-02-10T09:24:19Z")
Dear @farhan06 Kindly check and confirm that you are signing your B2C invoice in the same certificate that you are using in the API authorization. Thanks, Ibrahem Daoud. ---
**Author:** ![farhan06](https://avatars.discourse-cdn.com/v4/letter/f/35a633/32.png) [@farhan06](https://zatca1.discourse.group/u/farhan06)\ **Post date:** [February 10, 2025, 9:31am UTC](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657/20 "2025-02-10T09:31:55Z")
@idaoud yes using same secret and certificate getting from production compliance api (production/csids) [Next page](https://zatca1.discourse.group/t/simulation-the-provided-certificate-signing-request-csr-is-invalid/5657.md?page=2)