Design secure certificate templates, control enrollment, manage template publication, validate certificate profiles, plan lifecycle changes, plus recover archived encryption keys.