Two-Tier CA/PKI Server with Hashicorp Vault(cloudinvent.com)

http://cloudinvent.com/blog/howto-hashicorp-vault-ca-pki-deployment/