When you generate a CSR, most server software asks for the following information: common name (e.g., www.domain.com), organization name and location (country, state/province, city/town), key type (typically RSA), and key size.
If your certificate is getting stuck in "draft" and you are using a custom CSR, then check the following:
- Please make sure to check that the common name on your CSR is matching the domain name you have entered in the ZeroSSL wizard
- We only support an RSA key size of 2048 or 3072 bits
- If you are issuing a wildcard certificate, please make sure your CSR reflects this
In case you are experiencing any of the above issues, please cancel the draft certificate (please see the steps here) and try again.
Troubles with custom CSRs?
Before contacting us please try the following three things:
- Check the above possible issues with a custom CSR
- Visit this Troubleshooting article for further help!!
- Please check for an ongoing service incident.