Update:  This problem has been resolved.  If you were experiencing certificate issues, please reboot or do gpupdate/force.

Original Notice:  SCCM clients can no longer request a PKI client workstation certificate. This breaks the SCCM imaging processes and disallows current SCCM clients with an expired certificate to request a new one. We are working with the Server Support Team to remediate this issue.