vyos@r1-roll# run generate pki ca install caSSTP
Enter private key type: [rsa, dsa, ec] (Default: rsa) 
Enter private key bits: (Default: 2048) 
Enter country code: (Default: GB) USA
Enter state: (Default: Some-State) MIA
Enter locality: (Default: Some-City) Miami
Enter organization name: (Default: VyOS) 
Enter common name: (Default: vyos.io) 
Traceback (most recent call last):
  File "/usr/libexec/vyos/op_mode/pki.py", line 825, in <module>
    generate_ca_certificate(args.ca, install=args.install, file=args.file)
  File "/usr/libexec/vyos/op_mode/pki.py", line 360, in generate_ca_certificate
    cert_req = generate_certificate_request(private_key, key_type, return_request=True, ask_san=False)
  File "/usr/libexec/vyos/op_mode/pki.py", line 330, in generate_certificate_request
    cert_req = create_certificate_request(subject, private_key, subject_alt_names)
  File "/usr/lib/python3/dist-packages/vyos/pki.py", line 120, in create_certificate_request
    x509.NameAttribute(NameOID.COUNTRY_NAME, subject['country']),
  File "/usr/lib/python3/dist-packages/cryptography/x509/name.py", line 94, in __init__
    raise ValueError(
ValueError: Country name must be a 2 character country code
[edit]
vyos@r1-roll#