For anyone needing a refresher on PKI, CA, etc, the article references an earlier blog post that is very well-written and informative: https://smallstep.com/blog/everything-pki/