Windows SSL Certificate Installation

The Digicert cert utility for Windows make the process so much easier:

To generate the CSR:
https://www.digicert.com/util/csr-creation-microsoft-active-directory-ldap-2012-digicert-utility.htm

To install the Cert:
https://www.digicert.com/ssl-certificate-installation-microsoft-active-directory-ldap-2012.htm

For LDAPS on a domain controller, I did not have to import the cert file into the AD DS personal store.