Certificate Hub has three sets of capabilities:

• The find capabilities inventory certificates across your organization (through network discovery) and automated certificate import (from CA databases and cloud services).
• The control capabilities centrally manage policy, issuance & access to public and private certificates regardless of vendor. Perform manual operations as necessary to issue, renew, and revoke certificates.
• The automation capabilities push keys and certificates to endpoints, with fully managed rotation and certificate profile management.
• The report capabilities provide organizational, issue notifications, and reports to remind certificate owners of actions they need to take.

• Licensing model
• High-level architecture