| Previous | Next |
| CERTSRV_E_TEMPLATE_CONFLICT | CERTSRV_E_ARCHIVED_KEY_REQUIRED |
CERTSRV_E_SUBJECT_ALT_NAME_REQUIRED
CERTSRV_E_SUBJECT_ALT_NAME_REQUIRED The selected template requires a Subject Alternative Name (SAN), but the request does not contain the required SAN extension or the CA cannot construct it from directory data.
What to check
- Review the template Subject Name settings to determine whether the SAN must be supplied in the request or built from Active Directory.
- Confirm that the required DNS, UPN, email, or other directory attributes are present and correct for the requester.
- Validate every SAN value against the intended service identity; a successful issuance with the wrong SAN can create a serious authentication risk.
Microsoft: Subject Alternative Name guidance
Microsoft: Certificate template concepts
Microsoft: Manage certificate templates
Looking for a different code? Search another status or error code.