certutil -setreg policy\EditFlags -EDITF_ATTRIBUTESUBJECTALTNAME2