Is it possible to issue a wildcard certificate for a web server on a Windows domain network?

Question

Active Directory

Hi
I am creating a certificate request for a web server on a domain controller. I successfully sign this request in AD CA.
I receive a certificate. Right now I need to host it on the nginx server. How can I get the private key? Exporting the certificate is not possible (checked the box to make the private key exportable). Or is it not the true way at all?

Answer 1

The certificate template must allow export with a private key.
Apparently you are using a template where this is not included.
Create a template based on the one you need and edit it.

Answer 2

Create a CSR on the computer where the certificate will be, so as not to drag the key back and forth - that's the true way.