Non Domain User Auth with Certificates

Hello All,

Need some suggestion from your side on my below requirement :-

Required Setup :-

Need to authenticate our Guest Users who are non domain users/system with certificate.

Current Setup :-

We have two Windows Server 2012 Enterprise running with AD, DHCP, CA, NPS Roles on same server as active standby.

We have configured 802.1x user auth for all our domain users and its working fine without any issue. We have installed the Domain certificate that we got from CA.

Could you please suggest how can i get a certificate generated from our domain CA for NON Domain users.

Thanks

Rohit Sood