{"id":722,"date":"2012-11-01T00:00:00","date_gmt":"2012-11-01T00:00:00","guid":{"rendered":"https:\/\/fir3netwp.gmsrrpobkbd.com\/2012\/11\/01\/windows-2008-ca-error-constructing-or-publishing-certificate\/"},"modified":"2023-02-24T13:03:51","modified_gmt":"2023-02-24T13:03:51","slug":"windows-2008-ca-error-constructing-or-publishing-certificate","status":"publish","type":"post","link":"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html","title":{"rendered":"Windows 2008 CA Unable to Issue Certificate: The request subject name is invalid or too long"},"content":{"rendered":"

Issue<\/strong><\/h4>\n

When requesting a certificate via the browser, at the point you try to issue the certificate (via certsrv.msc) you receive the error:<\/p>\n

Error Constructing or Publishing Certificate<\/p>\n

When looking through the Events for Active Directoty Certificate Services you see the error:<\/p>\n

Active Directory Certificate Services denied request 8 because The request subject name is invalid or too long. 0x80094001 (-2146877439).<\/span><\/p>\n

Solution<\/strong><\/h4>\n

To enable the parsing of request attributes for subject information, the following command must be run. This allows for enrollment through web enrollment pages. Once done restart the certification authority service (net stop certsvc && net start certsvc).<\/p>\n

certutil -setreg ca\\CRLFlags +CRLF_ALLOW_REQUEST_ATTRIBUTE_SUBJECT<\/p>\n

Additional<\/strong><\/h4>\n

A useful command to check the request attributes can be found below:
\n<\/strong><\/p>\n

C:\\Users\\Administrator>certutil -view -restrict “Disposition>=30,Disposition<=31”<\/p>\n

!! Output Omitted !!<\/p>\n

Request Attributes: ”
\nchallenge: provePequalsNP
\ncountry: UK
\nstate: HANTS
\nlocality: STOKE
\norg: IT
\norgunit: IT
\nemail: test@test
\ncommonname: bob
\nCertificateUsage:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1.3.6.1.5.5.7.3.2
\nUserAgentString: Mozilla\/5.0 (Windows NT 6.1; WOW64) AppleWebKit\/537.4 (KHTML, like Gecko)\u00a0\u00a0 Chrome\/22.0.1229.94 Safari\/537.4<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Issue When requesting a certificate via the browser, at the point you try to issue the certificate (via certsrv.msc) you receive the error: Error Constructing or Publishing Certificate When looking through the Events for Active Directoty Certificate Services you see the error: Active Directory Certificate Services denied request 8 because The request subject name is … Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34],"tags":[],"yoast_head":"\nWindows 2008 CA Unable to Issue Certificate: The request subject name is invalid or too long<\/title>\n<meta name=\"description\" content=\"Issue When requesting a certificate via the browser, at the point you try to issue the certificate (via certsrv.msc) you receive the error: Error\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Windows 2008 CA Unable to Issue Certificate: The request subject name is invalid or too long\" \/>\n<meta property=\"og:description\" content=\"Issue When requesting a certificate via the browser, at the point you try to issue the certificate (via certsrv.msc) you receive the error: Error\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html\" \/>\n<meta property=\"og:site_name\" content=\"Fir3net\" \/>\n<meta property=\"article:published_time\" content=\"2012-11-01T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-02-24T13:03:51+00:00\" \/>\n<meta name=\"author\" content=\"Rick Donato\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Rick Donato\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html\"},\"author\":{\"name\":\"Rick Donato\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037\"},\"headline\":\"Windows 2008 CA Unable to Issue Certificate: The request subject name is invalid or too long\",\"datePublished\":\"2012-11-01T00:00:00+00:00\",\"dateModified\":\"2023-02-24T13:03:51+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html\"},\"wordCount\":183,\"publisher\":{\"@id\":\"https:\/\/www.fir3net.com\/#organization\"},\"articleSection\":[\"Microsoft\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html\",\"url\":\"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html\",\"name\":\"Windows 2008 CA Unable to Issue Certificate: The request subject name is invalid or too long\",\"isPartOf\":{\"@id\":\"https:\/\/www.fir3net.com\/#website\"},\"datePublished\":\"2012-11-01T00:00:00+00:00\",\"dateModified\":\"2023-02-24T13:03:51+00:00\",\"description\":\"Issue When requesting a certificate via the browser, at the point you try to issue the certificate (via certsrv.msc) you receive the error: Error\",\"breadcrumb\":{\"@id\":\"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.fir3net.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Operating Systems\",\"item\":\"https:\/\/www.fir3net.com\/os\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Microsoft\",\"item\":\"https:\/\/www.fir3net.com\/os\/microsoft\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Windows 2008 CA Unable to Issue Certificate: The request subject name is invalid or too long\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.fir3net.com\/#website\",\"url\":\"https:\/\/www.fir3net.com\/\",\"name\":\"Fir3net\",\"description\":\"Keeping you in the know\",\"publisher\":{\"@id\":\"https:\/\/www.fir3net.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.fir3net.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.fir3net.com\/#organization\",\"name\":\"Fir3net\",\"url\":\"https:\/\/www.fir3net.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png\",\"contentUrl\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png\",\"width\":390,\"height\":88,\"caption\":\"Fir3net\"},\"image\":{\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037\",\"name\":\"Rick Donato\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g\",\"caption\":\"Rick Donato\"},\"description\":\"Rick Donato is a Network Automation Architect\/Evangelist and the founder of Packet Coders.\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Windows 2008 CA Unable to Issue Certificate: The request subject name is invalid or too long","description":"Issue When requesting a certificate via the browser, at the point you try to issue the certificate (via certsrv.msc) you receive the error: Error","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html","og_locale":"en_US","og_type":"article","og_title":"Windows 2008 CA Unable to Issue Certificate: The request subject name is invalid or too long","og_description":"Issue When requesting a certificate via the browser, at the point you try to issue the certificate (via certsrv.msc) you receive the error: Error","og_url":"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html","og_site_name":"Fir3net","article_published_time":"2012-11-01T00:00:00+00:00","article_modified_time":"2023-02-24T13:03:51+00:00","author":"Rick Donato","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Rick Donato","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html#article","isPartOf":{"@id":"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html"},"author":{"name":"Rick Donato","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037"},"headline":"Windows 2008 CA Unable to Issue Certificate: The request subject name is invalid or too long","datePublished":"2012-11-01T00:00:00+00:00","dateModified":"2023-02-24T13:03:51+00:00","mainEntityOfPage":{"@id":"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html"},"wordCount":183,"publisher":{"@id":"https:\/\/www.fir3net.com\/#organization"},"articleSection":["Microsoft"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html","url":"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html","name":"Windows 2008 CA Unable to Issue Certificate: The request subject name is invalid or too long","isPartOf":{"@id":"https:\/\/www.fir3net.com\/#website"},"datePublished":"2012-11-01T00:00:00+00:00","dateModified":"2023-02-24T13:03:51+00:00","description":"Issue When requesting a certificate via the browser, at the point you try to issue the certificate (via certsrv.msc) you receive the error: Error","breadcrumb":{"@id":"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.fir3net.com\/Windows-2008\/windows-2008-ca-error-constructing-or-publishing-certificate.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.fir3net.com\/"},{"@type":"ListItem","position":2,"name":"Operating Systems","item":"https:\/\/www.fir3net.com\/os"},{"@type":"ListItem","position":3,"name":"Microsoft","item":"https:\/\/www.fir3net.com\/os\/microsoft"},{"@type":"ListItem","position":4,"name":"Windows 2008 CA Unable to Issue Certificate: The request subject name is invalid or too long"}]},{"@type":"WebSite","@id":"https:\/\/www.fir3net.com\/#website","url":"https:\/\/www.fir3net.com\/","name":"Fir3net","description":"Keeping you in the know","publisher":{"@id":"https:\/\/www.fir3net.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.fir3net.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.fir3net.com\/#organization","name":"Fir3net","url":"https:\/\/www.fir3net.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png","contentUrl":"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png","width":390,"height":88,"caption":"Fir3net"},"image":{"@id":"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037","name":"Rick Donato","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g","caption":"Rick Donato"},"description":"Rick Donato is a Network Automation Architect\/Evangelist and the founder of Packet Coders."}]}},"_links":{"self":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/722"}],"collection":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/comments?post=722"}],"version-history":[{"count":3,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/722\/revisions"}],"predecessor-version":[{"id":3671,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/722\/revisions\/3671"}],"wp:attachment":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/media?parent=722"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/categories?post=722"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/tags?post=722"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}