Update: This problem has been resolved. If you were experiencing certificate issues, please reboot or do gpupdate/force.
Original Notice: SCCM clients can no longer request a PKI client workstation certificate. This breaks the SCCM imaging processes and disallows current SCCM clients with an expired certificate to request a new one. We are working with the Server Support Team to remediate this issue.