[Version]
 Signature="$Windows NT$"

[NewRequest]
Subject="CN=<FQDN>"
Subject="C=RU, E=myemail@mydomain.ru, O=MyOrganization, OU=MyDepartnet, L=Moscow, CN=SERVERNAME.mydomain.ru" 
FriendlyName = SERVERNAME.mydomain.ru
Exportable=TRUE
KeyLength=2048
KeySpec=1
KeyUsage=0xf0
MachineKeySet=TRUE
UserProtected = FALSE
UseExistingKeySet = FALSE
ProviderName = "Microsoft RSA SChannel Cryptographic Provider"
ProviderType = 12
RequestType = PKCS10
KeyUsage = 0xA0
HashAlgorithm = SHA256 

[RequestAttributes]
CertificateTemplate=MyTemplate

[EnhancedKeyUsageExtension]
OID=1.3.6.1.5.5.7.3.1
OID=1.3.6.1.5.5.7.3.2

[Extensions] 
2.5.29.17 = "{text}"
_continue_ = "dns=SERVERNAME.mydomain.ru&dns=SERVERALIAS.mydomain.ru" ;