Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ASA-Cx decrypted SSL

Hello guys.

Can not solve the problem. if it is solved.

I need to download a certificate to decrypt SSL. Doing all the official b_User_Guide_for_ASA_CX_and_PRSM_9_2.pdf a manual, but here I did not find a detailed description of the certificates. I have Microsoft PKI certificates in the company and that it produces are trusted throughout the company.

Did the following template with a web server private key obtained using open SSL (openssl pkcs12-in keyStore.pfx-out keyStore.pem-nodes) convert in .pem.

Just uploaded a public certificate of the certification

cation and also convert in .pem.

When downloads ace ck get sledushchuju error (attach pic)

For earlier thanks


Re: ASA-Cx decrypted SSL


I dont know if you fixed your issue or not, but the ASA CX cert must be a root or intermedate certificate. You will need a intermediate certificate so it can present the client the server identity as trusted by the internal CA.


Tarik Admani
*Please rate helpful posts*

Tarik Admani *Please rate helpful posts*

Hi admin000175,I don't know

Hi admin000175,

I don't know if you hv come to solve the issue but, I think I hv the solution.

just follow the steps mentioned on the link.



Schallum Nangui

CCIE #41765