SAN entries must be encoded in the request to the SAN extension OID = 2.5.29.17. Microsoft servers sometimes use a different format. In Microsoft Technet is available at http://technet.microsoft.com/de-de/library/ff625722(v=ws.10).aspx a detailed description of how the appropriate format can be generated.