The SID that wasn’t there: bypassing KB5014754 to Domain Admin on a fully patched AD CS
  submitted by   <a href="https://www.reddit.com/user/digicat"> /u/digicat </a> <br /> <span><a href="https://0xmaz.me/posts/certsrv-id-cmc-addExtensions-KB5014754-bypass/">[link]</a></span>   <span><a href="https://www.reddit.com/r/blueteamsec/comments/1v896ql/the_sid_that_wasnt_there_bypassing_kb5014754_to/">[comments]</a></span>