A certificate template is used to define what fields and usages a certificate will have. The best certificate to base a BYOD certificate on is the user certificate. It will provide an identity certificate used for the end-entity.
Step 1. Navigate to Server Manager > Roles > AD Certificate Authority > Certificate Templates.
Step 2. Highlight the certificate template named User, and select Duplicate.
Step 3. Click Next.
Step 4. Select the Template Version. Either will work; the sample screenshots are from a 2008 template version.