Error: MS CA error 0xc80005e2 while enrolling

Symptom:

Microsoft Certificate Authority (CA) certificate enrollment fails at stage 500 with error 0xc80005e2.

Cause:

This error is caused by having too many Subject Alternate Names (SAN) in the certificate request. There is no specific limit on the number of SANs for a certificate issued by MS CA. The total size of SANs is limited to 4KB.

Resolution:

Ensure the certificate object does not have SANs that exceed the length of 4KB. For example, 151 25-character DNS name entries, plus the overhead for encoding (~2 bytes per name), comes in at 4,081 bytes, just under the 4KB limit. More info can be found in this Microsoft TechNet article.