Issue adding SSL certs to AP8941 PDUs on 7.0.8

[silo-scott]

I'm trying to create an SSL cert for my APC PDUs using both Security Wizard and the CLI tool.  I'm running into issues using both.  I am generating CSRs and getting them signed by Windows AD CA.

If I use the Wizard, I can create a cert, but the Wizard doesn't generate any SAN entries and thus the browsers aren' t happy.  If I use the CLI, the final step results in an error:

Unhandled Exception: cryptlib.CryptException: -3: Bad argument, parameter 3
at NMCSecurityWizardCLI.Program.ImportSignedCSR(String sCertFile, String sKeyFile, String sOutFile)
at NMCSecurityWizardCLI.Program.Main(String[] args)

I've read in other posts that this can be a result of an entry being less than 7 characters, but this isn't the case for me.  I did attempt to use the resulting files from the CSR step in the Wizard to import.  I got an error saying the key wasn't right.

I've found in other postings that the CLI 1.0.0 doesn't have this issue, but it no longer seems to be available to download.

For referenece, here are the commands I am running:

NMCSecurityWizardCLI.exe --csr -o dc2-c1-pdu-01110-r1c1-a -n dc2-c1-pdu-01110-r1c1-a -c US -m Virginia -l Alexandria -g "Some Company Inc" -u "Internal IT" -e "it-system@example.com" -a 10.128.8.128 -i "https://dc2-c1-pdu-01110-r1c1-a.example.com" -d dc2-c1-pdu-02010-r1c1-a.example.com

[Windows AD certificate part]

certreq -submit -attrib "CertificateTemplate:WebServer" dc2-c1-pdu-01110-r1c1-a.csr

NMCSecurityWizardCLI.exe --import -o dc2-c1-pdu-01110-r1c1-a.example.com -s dc2-c1-pdu-02210-r1c1-a.cer -p dc2-c1-pdu-01110-r1c1-a