New Doc request - Enterprise Root CAs and how they are integrated with OASyS DNA

Customer is working with an external auditor and questions arose around the use of certificates, how they're used, can the root CA Certs be changed

Original report from Service Request 673111401:

We are in preliminary discussions with an outside vendor to assist us with implementing “best practices” around our PKI infrastructure. This includes the three OASyS DNA environments: orionpcr, oriontcr, and orionpds.local. Would it be possible for you or someone else with Aveva to jump on a call with us so we can get some questions answered that both us and our vendor have around certificate management and the risks involved in changing the Enterprise Root Certificate Authorities from these domains.

From Ben E, "Discussing with ATMOS today they require official documentation on Certificates to present to their auditors"

Since we don't have such a Doc I cannot create a defect in TFS.