Certificates are issued with proper serial number
MA keeps a persistent serial number counter
Implemented methods for certificate revocation and CRL generation