Create a text file and name it for example RequestPolicy.inf. Copy/paste the following text to the file: [Version] Signature=”$Windows NT$” [NewRequest] Subject = “CN=myserver.mycompany.com” KeyLength = 2048 KeySpec = 1 KeyUsage = 0xA0 ProviderName = “Microsoft RSA SChannel Cryptographic Provider” RequestType = PKCS10 FriendlyName = “My application” [EnhancedKeyUsageExtension] OID=1.3.6.1.5.5.7.3.1 ; Server Authentication OID=1.3.6.1.5.5.7.3.2 ; Client […]

Note A SAN cannot be added to a certificate after the certificate has been submitted, issued or enrolled. You can only add it at the time you create the policy file1. Prerequisites You have already created a policy file. Procedure Add following elements to your policy: The Extension section (if it’s not already the case2). […]