PKI & Certificate Authority Architecture