Active Directory Certificate Services a big security blindspot on enterprise networks
Microsoft's Active Directory PKI component commonly have configuration mistakes that allow attackers to gain account and domain-level privileges.
United States Logon Ekus Fullcontrol Genericall Lee Christensen Public Key Services Directory Certificate Services
Source: reseller.co.nz