https://blog.it-kb.ru/2014/09/18/certutil-windows-xp-and-windows-server-2012-r2-ca-0x80094011-the-permissions-on-this-certification-authority-do-not-allow-the-current-user-to-enroll-for-certificates/