[jaas]

We set that up before we were an operational CA and it has just never been a high enough priority to replace it. The team that would do it has a lot of other things to do. We'll get around to it at some point.

[borplk]

Probably not a bad idea to use another CA for that.