Design certificate authorities, issuance, validation, trust stores, rotation, revocation, mutual TLS, code signing, and PKI operations.
