I just had this problem when trying to set up a wildcard certificate. It turned out that when specifying the county code, state, etc. for the csr - when I specified the Common Name for our website, I needed to include *.oursitename.org. I needed the *.
After I got a new csr in which *. had been specified, I got the csr that I needed.