I generated a CSR from the pfSense certificate manager and had it signed by StartSSL. StartSSL changes the certificate subject (and you can not predict beforehand what it will be). OpenSSL and IIS accept the signed certificate anyway, but pfSense gives this error:
> The certificate subject '[PRIVATE]' does not match the signing request > subject. Is there any way around the subject change to get the certificate imported? - Yehuda
