Certificate error 0x80094001
Certificate error 0x80094001 CERTSRV_E_BAD_REQUESTSUBJECT
When requesting a certificate from an internal CA, it can be frustrating to receive an error 0x80094001 message, especially when the error message is not clear. One common error message that may be encountered is “Certificate Request Denied” with the additional information “Error Parsing Request The request subject name is invalid or too long. 0x80094001 (-2146877439 CERTSRV_E_BAD_REQUESTSUBJECT).”
Error message 0x80094001
Certificate Request Denied Your certificate request was denied. Your Request Id is 0. The disposition message is "Error Parsing Request The request subject name is invalid or too long. 0x80094001 (-2146877439 CERTSRV_E_BAD_REQUESTSUBJECT)". Contact your administrator for further information.
Reason for 0x80094001 error
This error message can be caused by a number of different factors, but one common cause is that the country code specified in the request is in full words rather than the required Alpha-2 code from the ISO 3166 standard. This standard provides a list of country codes that are used to identify countries and their subdivisions.
To resolve this issue, it is important to refer to the official source of the ISO 3166 codes, which can be found at https://www.iso.org/iso-3166-country-codes.html. You can also refer to a list of most of the countries Alpha-2 codes on https://en.wikipedia.org/wiki/List_of_ISO_3166_country_codes. By using the correct Alpha-2 code, the request can be resubmitted and the certificate can be issued without any error.
However, it is important to note that this is not the only cause of the “Certificate Request Denied” error message. Other possible causes include an invalid or too long subject name, an expired or revoked certificate, or a problem with the certificate request itself.
It is also important to contact your administrator for further information in case of such error. They will be able to provide more specific guidance on resolving the issue and can help to ensure that the certificate request is accurate and meets the standards set forth by the CA.
Takeaway
In conclusion, when requesting a certificate from an internal CA, it is important to pay attention to the error message and to use the correct Alpha-2 code from the ISO 3166 standard to avoid the “Certificate Request Denied” error. By following this advice, you can make the certificate request process smooth and avoid frustration.
You may also want to check how to Generate an SSL Certificate for Proxmox GUI.