3.2.2.6.2.1.2.3 Processing Rules for Renewal Request

In addition to the processing rules defined in section 3.2.1.4.2.1.4.2, Enterprise CA MUST validate that the renewal request is based on the same certificate template as the certificate being renewed. If certificate templates do not match, the CA MUST return a non-zero error.