As pointed out in a cross-post on ServerFault (https://serverfault.com/questions/1145085/attributes-windows-ca-templates), it is not possible to include custom RDN attributes when template is configured to build subject from AD.
Attribute Certificate
Raul Guchinife
120
Reputation points
Hello
Windows Enterprise CA.
I have been requested that in the certificates appear the following attributes: OU, C (country) and O (organization).
I have seen that in the certificate template in the "Subject Name" tab the option "Supply in the request", when you request the certificate you can manually enter these fields.
However, if the option "build from this Active Directory information" is checked, I don't know how to make these attributes appear in the certificate.
How can I make these attributes appear with the option "build from this Active Directory information"?