Fetch latest certificate
Give subject DN to fetch users latest certificate.
Note that the order or case of element descriptors in the DN (C, O, CN, etc.) is unimportant. The case of elements themselves, on the other hand, IS important.
For example, cn=foo is considered equal to CN=foo but different from cn=FOO.
If you receive a 404-Not found response, it means that the subject does not have a certificate in the database. Check your entry to make sure you have specified all the DN components.