http://vancecountyfair.com/active-directory-certificate-templates/frasers-idm-blog-installing-freeipa-with-an-active-directory-for-active-directory-certificate-templates/