If the certificate subject contains constructs like
C=SE, ST=Taka Tuka, L=KeyNanny Test Centre, O=KeyNanny, OU=KeyNanny QA, CN=KeyNanny Test Hero/emailAddress=keynanny@example.com
KeyNanny will not properly extract the encryption certificate issuer from the CMS information. The problem is the /emailAddress parsing section, due to different sanitization of the subject information in certificate and CMS parsing no match is found.