3.1.2.4.2.2.2.6 Certificate.Template.msPKI-Certificate-Application-Policy
The client MUST create the Certificate Application Policy extension as specified in section 2.2.2.7.7.3, and using the OIDs in this abstract datum.
This extension MUST be added as a request attribute to the certificate request. Specifications are in section 2.2.2.7.7.<55>