nkmi PKI design
#mTLS
CA Hierarchy
nkmi.me Private Root CA - G2 (cfssl, ~2029/11/1)
nkmi.me Private AD CA - coney (AD CS, ~2021/2/1)
nkmi.me Private CA Clients - G4 (Vault, ~)
nkmi.me Private CA Step - G1 (step-ca, ~2023/5/10)
nkmi.me Dedicated Private CA fe - G2 (Vault, ~)
nkmi.me Dedicated Private CA k8s-aperture-etcd - G1 (Vault, ~2020/6/19)