025EA164 Unable to convert an X.509 name to a distinguished name.

Explanation
Certificate management services is unable to convert
an X.509 name to a distinguished name (DN) string.  Additional information
for the error error can be obtained by turning on debug messages for
subcomponent KRB_GSSAPI.

User response
Ensure that the X.509 certificate or certificate
revocation list has not been modified.  Contact your service representative
if the error persists.