http://www.sans.org/reading_room/whitepapers/auditing/rss/analyzing_enterprise_pki_deployments_33284f