I'm having trouble loading a digital certificate on an ASA 5520 running 8.0(4). The CA is a Fedora Dogtag Certificate System with a very simple PKI scheme running (O=CM TEST). All of this is running on an isolated test network in a lab setting.
I'm able to enroll two ISRs (2800 and 3800) without issue to the CA using SCEP, but the ASA fails to parse the certificate response generating a "crypto_certc_pkcs7_extract_certs_and_crls failed (1795)" error message.
I've attached the relevant ASA config and debug output below. Manual enrollment (through both the ASDM and CLI) fails as well.
Any help is appreciated.