Certificate management subsystem , communicating with key management subsystem safely through spkm agreement and ca , can be used to manage and use ca to complete issuing and filing of the ca and to issue a blacklist for rescissory ca 证书管理子系统可以对ca密钥进行管理和使用，通过spkm协议和数字证书安全地与密钥管理子系统通讯，完成用户密钥的处理，签发数字证书，并进行发布与归档，对已经废除的证书，签发黑名单。
