This guide will help you to do the basic configuration of the active directory certificate services for your production or lab environment.
Go to the server manager and add server role and select ad cs
Select certificate authority and certificate authority web enrollement
Once you finish the installation go to the internet information service
and select your servername>then select certificate from right hand side
Remove all the available certificate from selecting and click on remove
once you remove all the certificate and select on create domain certificate and give the details according to your domain and ca.you can see the my example input data
once you successfully create the domain certificate.just go to the default site on the iis and click on binding on your right hand side and click on add
select https from type and select the certificate from ssl certificate(this should be that domain certificate)
now your certificate authorities web site is ready to use.just type https://yourservernamewithdomainname/certsrv(ex https://dc1.testlab.loca/certsrv/certsrv)