What's the benefit of having a two-tier PKI heirarchy? (2 Solutions!!)