Hi there,
I have tried below two steps with Windows Server 2016, and verified that all of steps below could be performed as written in below links.
Install and Configure a Windows Server 2012 R2 Certificate Authority
Set Up a Certificate Template on the CA
Also I have queried VMware and had a reply that Windows Server 2016 can be used as AD CS as of now(Feb 10th. 2019).
Regards
Yammy