All processing is local.
Run certutil -dstemplate on a domain-joined system and paste the output below.
certutil -dstemplate