I have a pfx file of a wildcard certificate but I can't see the digital ID that I'm trying to configure based on that PFX file

[avig1175]

Hello people!

I use Acrobat Reader DC on a Win7 OS.

Few month ago I bought a wildcard SSL certificate from Godaddy (to secure my organization email communication and other IT needs), and now I want to use it to sign PDF files.

I've opened Acrobat Reader and then went to Tools -> Certificates

Then I pressed the "Digitally sign" button -> marked an area -> and then had to choose a digital ID from a list (I had like 15 of them already in the list, apparently cause I used my computer to create certificates for IT purposes in the past).

Because none of them were based on a certificate originating from a trusted authority, I pressed "Configure New Digital ID" button, and managed to create a new Digital ID and saved it to Windows store and use it to sign PDF files, But in this process I didn't use my Godaddy certificate :S

Tried also "Use a Digital ID from a file" -> browsed for my PFX file -> entered its password and pressed "continue" -> I got a message that telling me that the following ID will be added to the list of Digital ID, and below that I see the Godaddy certificate. I pressed "continue" BUT IT DOES NOT APPEAR IN THE LIST :S

What am I doing wrong???

Any help will be much appreciated !

Thanks all,

Avi

[Meenakshi Negi]

Hi Avi,

Please try to add the certificate in the Adobe Acrobat Reader DC using the steps mentioned below:

- Launch the application and go to Edit > Preferences > Signatures.

- Under the title Identities and Trusted certificates on left, click "More" tab as shown in the screenshot below:

- Then click on Add ID in the settings window opens.

- Then select the radio button for "A file" and browse the location where you have saved the certificate.

- Select the file and add the password in the tab below.

You may also refer this help document Manage trusted identities, Adobe Acrobat for further help.

Hope that will resolve the issue.

Let us know how it goes.

Regards,

Meenakshi

[avig1175]

Hi Meenakshi, Thanks so much for replying.

I've tried that, but when I'm trying to sign a document I'm being requested to choose a Digital ID (in the "Sign with a Digital ID" window) and again, it's not appearing in the list.

I do can export it to a FDF file.

Now, in the "Sign with a Digital ID" window I can press "Configure New Digital ID" but when I try to import back I can't choose that FDF file (It "wants" the PFX again, which doesn't lead to success in the process as I described earlier)

I read almost all the related docs on this in Adobe's support site.

Am I doing something wrong ?? (or maybe a wildcard certificate isn't good for this?)

THANKS AGAIN!!!

Avi

[Meenakshi Negi]

Hi Avi,

The certificate you are using is not on the trusted list of Adobe Approved Trust List members.

For more information on Adobe Approved Trust list, you may refer this help document Adobe Approved Trust List

Please check with the Godaddy, if this certificate is permissible for signing the documents.

Let us know if you need further help.

Regards,

Meenakshi

[avig1175]

Hi Meenakshi,

Thanks again for helping.

Can you please tell me why are you sure that my certificate is not on the Approved list?

Now, lets assume it's not.

If so, why am I able to sign PDF files with other certificates on my computer? (all of them produced on my standalone computer so nobody knows they even exist).

BTW, I thought Godaddy is big enough to be in the AATL list, and because our certificate chain up to Godaddy there should be no problems with this process…

Anyhow, in the Digital ID creation wizard, the Acrobat Reader is not returning any error message.

In other words – near the end of the wizard, right before the dialog box containing the list of Digital IDs for me to choose from, It DOES shows me the certificate and there is no clue that it is not going to appear in the list on the next dialog box.

I suspect that wildcard certificates (*.domain.com) or maybe the type of the certificate (X509 or whatever) is the cause of the problem.

What are your thoughts?

THANKS !!

Avi