| Previous | Next |
| CRYPT_E_ASN1_NOEOD | CERTSRV_E_NO_REQUEST |
CERTSRV_E_BAD_REQUESTSUBJECT
CERTSRV_E_BAD_REQUESTSUBJECT The Certification Authority rejected the request because the Subject distinguished name is malformed, contains unsupported values, or exceeds the size accepted by the CA policy.
What to check
- Compare the requested Subject with the template’s Subject Name configuration. A template that builds the subject from Active Directory expects the required directory attributes to exist.
- For a request that supplies its own subject, review the CSR or INF file for invalid RDN syntax, unexpected characters, and duplicate or excessive attributes.
- Do not relax subject-supply restrictions merely to make the request pass; broad subject supply can create a certificate-issuance security risk.
Microsoft: Certificate template concepts
Microsoft: Subject Alternative Name guidance
Looking for a different code? Search another status or error code.