There's a lot of detail about this in the related blog post: http://blog.cloudflare.com/introducing-cfssl
I'll change the url of the current item to the blog post. Two better solutions that we don't support yet would be either to (a) reset the clock on the earlier post, which has the discussion [1], or (b) merge that thread into this one. As it turns out, we are working on both of these (unrelated to the bug).
Really excited about these new features. It's great to see HN working on tools like that, given how great the site is.