The request was made on behalf of a subject other than the caller. The certificate template must be configured to require at least one signature to authorize the request.

• 请求是代表一个主题而不是一个调用程序而执行的。证书模板必须配置为要求使用至少一个签字来对请求进行身份验证。