SSL certificate cannot be ordered. Uppercase letters in CSR

Problem

When ordering a multi-domain SSL certificate using a ready-made CSR request, the platform interrupts the ordering process with an error:

• in the web interface:
  A name specified in the certificate request cannot be removed from the list of additional names. Names specified in the request: <domain list>;
• in the billmgr.log log:
  

  Type: 'csr_altname':

Cause

The order is interrupted due to an uppercase letter in one of the domains inside the CSR. The system fails to match the domain with the form field and interrupts the certificate ordering process.

Diagnostics

To confirm the cause of the issue, compare the domains from the error message in the web interface or from the CSR with the domains in the order form. Check the character case and pay attention to uppercase letters.

If the CSR contains a domain with an uppercase letter, while the form contains the same domain in lowercase, this confirms the issue.

Solution

To resolve the issue:

1. Regenerate the CSR, specifying domains in lowercase letters. For example, example-e2.example.com instead of example-e2.Example.com.
2. Make sure the SAN list in the CSR matches the fields in the order form.
3. Repeat the certificate ordering process.