https://craftyexpressions.net/2019/12/active-directory-certificate-templates/certificate-autoenrollment-in-windows-server-2016-part-3-regarding-active-directory-certificate-templates/