The following error is displayed when creating a SAN CSR using OpenSSL in NetScaler:
Problems making Certificate Request
When OpenSSL is used to generate the CSR then the country code greater than 2 characters in openssl.conf file is not allowed. To resolve this issue change the country code to 2 characters.
Please see the following Country Codes below that are required when creating a certificate signing request.
Country code should be less than 2 characters in openssl.conf file.