NAM 4.3.2 cannot import signed CSR - java.io.ioexception DerInputStream.getLength too big

Trying to import a signed CSR (generated by NAM 4.3.2) that was signed by GlobalSign.

Never had issues like 3-4 years ago but we switched to DigiCert back then and now we're at Globalsign

Anyway, I get this error in the Admin Console.  I HAVE imported the Trusted root and the Intermediate.  I HAVE assigned to the keystore.  I HAVE verified no extra spaces (even did copy/paste as well as the .PEM file)

Error importing signed certificate:  Unable to initialize, java.io.IOException:

DerInputStream.getLength(): lengthTag=47, too big.

We've tried two different CSR/Wildcard pairs.

Also tried two different NAM environments (we have a DEV one as well)

We HAVE verified the roots/chain are good/valid.

Any ideas?