Great article here to aid in the study of Windows PKI deployment:
http://hkeylocalmachine.com/?p=540