If I don't specify an organization it works fine.
[NewRequest]
Organization="xxx xxx xxxx"
Country=US
Subject="xx.xxe.xxxeg.com"
KeySpec=1
KeyLength=1024
Exportable=TRUE
MachineKeySet=TRUE
SMIME=False
PrivateKeyArchive=FALSE
UserProtected=FALSE
UseExistingKeySet=FALSE
ProviderName="Microsoft RSA SChannel Cryptographic Provider"
ProviderType=12
RequestType=PKCS10
KeyUsage=0xa0
[EnhancedKeyUsageExtension]
OID=1.3.6.1.5.5.7.3.1 ; this is for Server Authentication
[RequestAttributes]
SAN="dns=XXXXXadam.XXe.xxxeg.com"