[Freeipa-users] Installation issues with sub-ca.

[Andrea Bontempi]

> The issue is one is encoded as a UTF8 string and the other is
> encoded as a printable string. This makes the binary derSubject and
> derIssuer fields different. NSS does not like derSubject and derIssuer
> fields that are different

Wow, that was the problem! Now it works! 
To fix must go to EJBCA Administration and activate "PrintableString encoding in DN" option in a new CA.

Thank you very much, your help has been fundamental :-)

Andrea Bontempi