Internet-accessible via ingress and cert-manager services
Basic X.509 CA built around the OpenSSL command-line utility.