This post explains how to use OpenSSL on pfSense to sign a Windows Enterprise Subordinate CA certificate signing request, including the openssl.conf setup and CRL distribution requirements.