Vault has had PKI since pre-v1; ACME was introduced in 2022 to modernize its APIs.