certreq with name-format "Lastname, Firstname"

Hi everybody,

I'm trying to script certificate requests with certreq and have a
problem I couldn't find a solution for.

I try to define the subject's name in the policyfile like this:

[NewRequest]
Subject="CN=Lastname\, Firstname, OU=Department, O=Organisation"

The backslash should be the escape character that must be set before
the comma. But when I try to build the request file, the following
error message comes up:

The string contains an invalid X500 name attribute key, oid, value or
delimiter. 0x80092023 (-2146885597)

I have a Windows enterprise CA running on Windows 2003 Enterprise
Server.

Thanks in advance for your help,
Markus

.