To import a Certificate Signing Request (CSR) into a Windows Certificate Authority Server, you must define a certificate template. OpenSSL does not do this because this is a Microsoft only concept. With the use of the Windows ‘certreq’ command, you can apply a template type during the request import process. This command should be available on your Microsoft CA server.
C:\>certreq -submit -attrib "CertificateTemplate:WebServer" request.csr
An alternative method for importing CSR’s to Microsoft CA can be found here.
