[HELP] The request for Smartcard user failed by the "Error constructing or Publishing Certificate"

First, on a computer which joined in domain, I request Enrollment Agent successfully.

Then, on the computer, I try to enroll a user to smartcard, the PIN prompts will display twice.

And I get fail message in certsrv dialog.

http://social.technet.microsoft.com/Forums/getfile/184342

And get the event log

http://social.technet.microsoft.com/Forums/getfile/184343

http://social.technet.microsoft.com/Forums/getfile/184344

would you please help me any suggestions about it? Thanks in advance!!!~