[sascha_sl]

It doesn't do that, you get one CA per instance.

You can run multiple instances though.

[rhuber]

Actually it does do that, you can trust multiple CAs in a single instance and even write firewalls scoped to CAs.