A few questions, that probably be on the mind of some: does it support an externally created, offline root CA? does it support custom EKUs? does it support custom templates? how does security works for enrollment, how do we limit who can request what certificates? what methods and protocols does it support for enrollment other than SCEP? can we issue certificates with custom properties similar to ADCS’ “supply in the request”, and how is that secured?