Certificate authority (CA) administrators can now create a private CA hierarchy, including root and subordinate CAs. A CA hierarchy is a way to organize CAs that provides strong security and restrictive access controls for the most-trusted root CA at the top of the hierarchy, while allowing more permissive access and bulk certificate issuance for subordinate CAs lower in the trust chain. This feat