Please see the [PKI Management vision page](/direction/secure/attack-surface/pki-management/)