It manages signed CSRs.