Excerpted from Planning for PKI: Best Practices Guide for Deploying Public Key Infrastructure by Russ Housley and Tim Polk. John Wiley & Sons 2001.