https://footballwchs.com/domain-controller-certificate-template/certsrv-can-only-see-user-and-basic-efs-petenetlive-inside-domain-controller-certificate-template/