AD Certificate services has many predefined templates for different usage (35 different if I counted well). We are going to look at some of them, customize them and look at the best practices.