| Previous | Next |
| CRYPT_E_INVALID_NUMERIC_STRING | CRYPT_E_INVALID_IA5_STRING |
CRYPT_E_INVALID_PRINTABLE_STRING
PrintableString is not equivalent to printable Unicode
CRYPT_E_INVALID_PRINTABLE_STRING means the value was assigned the ASN.1 PrintableString type but contains a character outside that type's historical repertoire. Letters, digits, space, and a small punctuation set are permitted; characters such as an at sign, underscore, backslash, accented letter, emoji, or typographic quotation mark are not automatically valid merely because they display correctly.
This commonly appears when an X.500 distinguished-name attribute is forced to PrintableString even though the subject data requires UTF8String. Changing the display encoding after the value has been built does not fix the ASN.1 type carried in the RDN structure.
Useful checks
- Identify the exact RDN attribute and its
dwValueType. - Compare every character with the ASN.1 PrintableString repertoire.
- Prefer UTF8String for internationalized names when the PKI profile allows it.
- Do not silently strip characters from identity fields; regenerate the request with the correct type.
References
- ITU-T X.680: PrintableString definition
- Microsoft: string types used by certificate enrollment
- Microsoft: CERT_RDN_ATTR structure
Looking for a different code? Search another status or error code.