I came accross the same problem when using a CA Certificate from an Active Directory CA. The certificate I was using was exported directly from the CA snapin tool for win2k3.

To get a CA...