Not sure if this is the right place for this, but here goes.
Upgraded a domain to 2008 R2. Migrated certificate services to 2008 R2 Enterprise root on a member server.
Autoenrollment works fine
Requesting cert from the MMC using certificates snapin works fine
Requesting a cert via the web https://servername/certsrv gets the following error;
Active Directory Certificate Services denied request 12345 because the request subject name is
invalid or too long 0x80094001 (-2146877439)
Error constructing or publiching certificate.
I created a new cert template and did NOT check use Active Directory for subject name as templates with this checked
do not show up in the web enrollment interface.
I have enabled this template for enrollment and gave users rights to enroll.
They are clicking advanced in the web interface as they want a computer cert.
For the subject name, they enter computername.domain.local
Based on searches I've done on the InterWeb, permissions APPEAR to be correct.
Again, Autoenroll and MMC work just fine. Appears to be confined to only web.