Imagine this scenario:

You've just set up a Private CA for your organization following best practices. You've got your root CA secured offline, intermediate CAs issuing certificates, and your policies are locked down. Everything looks perfect on paper.

Then reality hits:


Your microservices can't talk to each other because certificate SANs...