I was doing some testing of ssl on iis web servers and I needed to generate an certificate using a certifcate authority I had set up on a windows server.  I got an error when I tried to use the gui, the cause of which microsoft explains  here
Here’s the error:
Certificate Request Processor
The request contains no certificate template information. 0x80094801 (-2146875391)
Denied by Policy Module 0x80094801, the request does not contain a certificate template extension or the Certificate Template request attribute.
The solution is to use the command line tool certreq and specify the template to use (in this case, WebServer).  Here is the command:
certreq -submit -attrib “CertificateTemplate: WebServer” certreq.txt
Thanks to  Davidr  for the original post.