Good Day,

I generated a CSR that was rejected by verisign on the basis of it's lacking
a state code value.

The command "openssl req -noout -text -in <YOUR_CSR>" verified that there is
no state code value.

So the only other approach I see is to attempt to generate a temporary cert,
generate a csr from that, then re-import the present 3rd party cert until I
get the renewal.

As this is not an optimal solution, I thought I'd throw this out here once
more before proceeding with hope there might be another approach.

Thanks