Do you need to have ad bound macs before pushing out x509 certificates using config profiles?

[yungstump]

Looking to push out x509 certificates to machines, but in a environment where we don't have a directory service.