Create a certificate request with custom extensions and custom CSP/KSP

Here is an example of a policy file that can be run with certreq -new policy.inf

[Version]
Signature="$Windows NT$"

[NewRequest]
;Change to your,country code, company name and common name
Subject = "CN=DEMO CNG"

KeySpec = 1
KeyLength = 2048
Exportable = False
MachineKeySet = False
SMIME = False
PrivateKeyArchive = False
UserProtected = False
UseExistingKeySet = False
ProviderName = "Microsoft Platform Crypto Provider"
RequestType = PKCS10
KeyUsage = 0xa0

[EnhancedKeyUsageExtension]
OID=1.3.6.1.5.5.7.3.2; client authentication
OID=1.3.6.1.4.1.311.20.2.2; smart card logon

[Extensions]
    2.5.29.17 = "{text}"
    _continue_ = "UPN=User@Domain.com&"
    _continue_ = "EMail=User@Domain.com&"
    _continue_ = "DNS=Machine.Domain.com"