How do I request a certificate from CEP / CES on a Microsoft CA on OSX or Linux?

This article describes how to request a certificate from AD CS (Active Directory Certificate Services) from a non-domain joined windows computer.

I would think the same principals apply to non Microsoft OS's, and it's possible to do the same enrollment from OSX or Linux.

Question

• 
  

  How would I request a certificate from AD CS on OSX/Linux?

  
  


• 
  

  OR can someone tell me how does the AD CS service work (in sufficient detail) so I can develop an alternate solution?