Ahhh, back to this old one now. Turns out it need to be a web server template.
So today we cloned the webserver template and added the extension, but can't seem to get the template to appear in the dropdown to choose when we try to sign the cert.
Is there another step to do to get it to appear in that list, or something else in the properties of the template that needs enabling?