Yung Chou writes about setting up PKI and this is Part 2 of 2… good information around PKI..  http://blogs.technet.com/b/yungchou/archive/2013/10/21/enterprise-pki-with-windows-server-2012-r2-active-directory-certificate-services-part-1-of-2.aspx