https://footballwchs.com/domain-controller-certificate-template/creating-custom-secure-ldap-certificates-for-domain-controllers-intended-for-domain-controller-certificate-template/