PKI currently relies on the integrity of CAs and RAs that can function better. But the key limit of PKIs can be the management of it. Having a PKI in place doesn’t guarantee anything, many times, companies fail to deploy or manage it properly. Some examples include using cryptographic keys that are too short, using self-issued secret keys and certificates, incorrect storage, etc. Furthermore, most organizations lack the proper resources and budget to support PKI or do not assign clear ownership of it. This mismanagement is what poses a significant risk to an organization and increases the chances of a successful breach. Other criticisms of PKIs found include: The lack of multi-factor authentication on top frameworks. It’s not user-friendly and complicated to use. Its inability to adapt to changing advancements.