Skip to main content

GlobalSign login attempt failed toDerInputStream rejects tag type 45

Article # 3042269 - Page views: 314


After you configured the configuration for GlobalSign Integration ( GlobalSignDigitalSigningHandler ) in SignDoc, the Status Information shows following error:


GlobalSign login attempt failed: toDerInputStream rejects tag type 45



SignDoc cannot establish a TLS connection to the GlobalSign DSS API because there is an issue with and dedicated to the mTLS Certificate configuration.



The mTLS certificate needs to be a PKCS12 container (pfx file).
Importing the PEM encoded certificate (as available per "Copy to Clipboard" option in Atlas Portal) doesn´t work and will cause exactly this error: toDerInputStream rejects tag type 45

Please check knowledgebase article....

How to create a GlobalSign mTLS Certificate for SignDoc

....and use it as guide to create a new mTLS Certificate for connection to GlobalSign DSS API.


Level of Complexity 



Applies to  

Product Version Build Environment Hardware
SignDoc Standard 3.1      


Add any references to other internal or external articles



Article # 3042269
  • Was this article helpful?