The msPKI-Certificate-Policy attribute specifies each string
that represents a policy OID to be added to
the certificate
policy extension, as specified in [RFC3280]
section 4.2.1.5.<25> For schema details of this attribute,
see [MS-ADA2]
section 2.601.