# Certificate Issue

**URL:** <https://discuss.elastic.co/t/certificate-issue/251053>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [October 5, 2020, 9:59pm UTC](https://discuss.elastic.co/t/certificate-issue/251053 "2020-10-05T21:59:58Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Cassie\_Danaher](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cassie_danaher/32/76682_2.png) [@Cassie\_Danaher](https://discuss.elastic.co/u/Cassie_Danaher)\
**Post date:** [October 5, 2020, 9:59pm UTC](https://discuss.elastic.co/t/certificate-issue/251053/1 "2020-10-05T21:59:58Z")

</div>

I am trying to update our certificate for elasticsearch. I was able to do so for Kibana with no problems. When I try to use any command for certutil I get the same error:  
` certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an old, unsupported format.`

Any ideas what could be causing this?

---

<div class="post-metadata">

**Author:** ![abertolli](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abertolli/32/76550_2.png) [@abertolli](https://discuss.elastic.co/u/abertolli)\
**Post date:** [October 6, 2020, 7:48am UTC](https://discuss.elastic.co/t/certificate-issue/251053/2 "2020-10-06T07:48:12Z")

</div>

What versions of elasticsearch and kibana are you using?

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [October 6, 2020, 8:10am UTC](https://discuss.elastic.co/t/certificate-issue/251053/3 "2020-10-06T08:10:49Z")

</div>

> [@Cassie\_Danaher](#):
>
> I am trying to update our certificate

How exactly are you trying to do so, the more information you give us, the easier it will be for us to help out.

> When I try to use any command for certutil

This is _not_ `elasticsearch-certutil` but most probably [this certutil](https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/certutil). Are you attempting to use the latter on purpose or did you intend to use `elasticsearch-certutil` instead?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 3, 2020, 8:11am UTC](https://discuss.elastic.co/t/certificate-issue/251053/4 "2020-11-03T08:11:09Z")

</div>

Closed on November 3, 2020, 8:11am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.