I have imported a ssl cert I got from digicert in order to use www-ssl and api-ssl. I created the cert on a linux box. Everything is working as it should I get that my tik web page connection is secure and the api is running over my secure port. However I am still getting in the log files "got CRL with bad signature issued by DigiCert....."

Not sure how to resolve this error.
Thanks

certificate provider will give you 2 things:

certificate
CA bundle

you have to import certificate, then your private key, then the CA bundle and you are done

Thanks for the info all I got from them was an email with the plaint text of the cert and ca in the email.

So what the called the web server certificate. I copied that into text file and saved that as my .cert file

What they called the Intermediate CA. I copied that into text file and saved as .ca

Next I uploaded to the tik my two above files along with my . key file i made in openssl.

I then first import my .cert then import the .key and finally the .ca file and still get the bad signature error.

At the end of the imports my my ca has an lt in status on tik and my cert has a klt in status.

Everything sounds right to me

Any thoughts.

CRL is the cert revocation list. I'm guessing the CRL is perhaps signed by a cert which the router doesn't trust. You may need to import a different cert chain for it.

Sorry not real up on all the ssl cert stuff but if I uncheck under settings "crl download" the error stops and all seems to still work as expected. I cant really find any info on what crl download does and if i even needed it.

Any input.

Thanks