the pki role in ad cs issues that certificates and manages certificate validity is: CA Web Enrollment
CA Web Enrollment is a type of service that provides a set of web pages that allowed the user to communicate with the certification authority role service. Other method to do this is by using certification request wizard.
