https://www.digicert.com/util/csr-creation-microsoft-active-directory-ldap-2012-digicert-utility.htm