I tried to follow the instructions within the AD Selfservice application and they did not sem to work. I tried the Comodo one. They also had godaddy and Verisign, but the crt data I had did match any of those instructions.