The msPKI-Certificate-Policy attribute specifies each string
that represents a policy OID
to be added to the certificate
policy extension, as specified in [RFC3280] section
4.2.1.5.<25> For schema details of this attribute, see [MS-ADA2]
section 2.609.