https://www.petervanderwoude.nl/post/deploying-certificate-profiles-with-configmgr-2012/