Unable to import signer cert: data insn't an object ID (tag = 48)

Products

• CA API Gateway

Issue/Introduction

Our client certificate expired and when I created a new client signer certificate to import into the gateway the following error occurs: 

 

Environment

Release : 10.x

Cause

Normally this is caused when the import cannot extract the public key from the certificate file.  

Certain java versions contain a bug for the interop issue: 

https://bugs.java.com/bugdatabase/view_bug.do?bug_id=8267837

Resolution

Make sure it uses the compatible Java version tool to generate the private key, it is better to use the policy manager to create the private key and export and then import to the other gateway.