Certificate Management
I missed the renewal date provided by OSP. What should I do?
Answer:
If your certificate has expired, email ask@paynet.my to request a new renewal date. Include your Exchange ID and all registered email addresses associated with your exchange.
Renewal activation is manual—the new certificate will not become active until you complete the renewal steps documented in the Certificate Renewal Process.
Reference: PayNet Certificate Renewal Process
When I select “I DON’T HAVE my own CSR file” and download the certificate, which file is my new private key?
Answer:
When you download, you will receive three files: .crt, .csr, and .pem. The .pem file is your private key (functionally equivalent to a .key file).
Ensure you download the private key after providing consent before proceeding with certificate creation.
Reference: PayNet Certificate Renewal Process
How do I perform a certificate renewal in OSP for the first time?
Answer:
1. Email ask@paynet.my with your Exchange ID and two registered email addresses (preferably a group email).
2. Sign in to the One Stop Portal (OSP).
3. Navigate to Certificate Management → Active Tab then select Renew Certificate.
4. Follow the CSR generation steps and download the new certificate.
5. Refer to the Certificate Renewal Process for full guidance.
Reference: PayNet Certificate Renewal Process
I selected “I HAVE my own CSR file” and received: Error: Invalid CSR Format – OrganizationalUnit / Common Name [CA‑136]. What should I do?
Answer:
Ensure your CSR follows OSP’s formatting requirements. In OSP, click “Need help with your CSR” for detailed instructions and examples that meet the correct format.
Reference: PayNet CSR Guidelines
My current certificate has expired but the new certificate is not activated. Why?
Answer:
Certificate renewal in OSP is manual and requires completion of these steps:
1. Finish the Test Certificate process; and
2. Perform Verify Key Matches to confirm the private key corresponds to the public key.
3. Only after successful testing , the new certificate be rotated and ready for use by your application.
Reference: PayNet Certificate Renewal Process
I received an email stating my FPX exchange certificate will expire. How can I identify which Exchange ID it refers to?
Answer:
Sign in to OSP with your registered email.
1.From the PayNet Hub Dashboard, select One Stop Portal under Portals & Services.
2.Go to Certificate Management → Active Tab.
3.To view all exchange certificates and their expiry details.
Reference: PayNet Certificate Renewal Process
I logged in to OSP but Certificate Management shows no entries. What should I do?
Answer:
Email ask@paynet.my with your Exchange ID for assistance. Confirm you are using the registered email for certificate management.
Reference: PayNet Certificate Renewal Process
I’m new to the organization and don’t know my Exchange ID. How do I find it?
Answer:
Contact your acquirer bank to obtain the Exchange ID required to manage certificates in OSP.
I did not receive the SSO login code/OTP via email. What should I do?
Answer:
Check that your computer's date and time are correct, as errors can prevent OTP generation. If problems continue, email ask@paynet.my.
How long will my SSO account remain in OSP if I don’t log in?
Answer:
Accounts stay in OSP unless inactive for 14 months, after which the system deletes them.