Installing profiles using OSX server, but with a windows CA

[PBrawn]

As the subject says, I'm having a great deal of trouble installing profiles (with key extensions in particular) directly from OSX server. I see that the enrolment profile's SCEP certificate mentions servername.local, when I clearly need it to be server.fqdn so that the subsequent profiles refer to the server correctly making it more trustworthy.

 

Further to this, is it possible to sign profiles using a windows CA, or even manage all required OSX server ones this way? I'm really not great at certificates, but if anyone has some useful pointers or ideally a guide for this scenario, I would be most grateful.

 

I previously installed everything using scripts, but anything 10.14 onwards throws up issues with the key extensions part.

 

Thanks all