...
Ask your administration division for support in creating a certificate based on your csr. The Certificat must meet the following requirements:
It is an must be a X.509 certificate which is suitable for server authentication
It must be Base64-coded in PEM format
The certificat must be valid (valid from, valid to)
It is must be suitable for the provided private key
The private key may should not be password protected
The certificate should comprise the complete certificate chain where possible
If this is missing, then an attempt is made to download the missing intermediate and root certificate during installation.
...