https://9dok.net/document/yngm9140-planning-for-directory-services-in-public-key-infrastructures.html