I was recently renewing an SSL certificate for Exchange services with an internal certificate authority, when issuing the certificate request the following error was received:
Denied By Policy Module 0×80094801, The Request does not contain a certificate template extension or the certificate template request attribute
In order to issue the certificate request I was required to invoke the certreq utility as below agaisnt the certificate request generated, in the below example this is named certrequest.req.
certreq -submit -attrib "CertificateTemplate:WebServer" certrequest.req
Deans Blog 