1 post carrying the PKI tag, newest first.
RA, CA, key custody, attestation, lifecycle, audit. The PKI architecture decisions you can't put off.