Certificates and PKI Migration

The work of changing certificate chains, signature algorithms, trust stores, issuance workflows and HSM support across an estate, distinct from changing key exchange.