I not sure which certs I am suppose to use   openssl.exe x509 -req -days 3650 \ -in Meraki_SCEP_CA_CSR.csr -CA your_ca.crt \ -CAkey your_key.key -CAcreateserial \ -out Signed_Meraki_SCEP.crt   CA your_ca.crt  - Is this my Subordinate_G1_myAD_Root_G1 or myAD_Root_G1 your_key.key     - How do I get my key, export out of AD or a cert? Do I get this some ware else?   Do I need to have NDES configured in AD Cert server?   I tried to follow  How to sign certificates with a Microsoft CA - YouTube   Extensions required: Digital Signature Certificate Signing But they are not listed in extensions to add   ... View more