You need to design a PKI that meets business requirements. What should you do？（）
- AMove ATLCA1 offline and create an enterprise subordinate CA to issue certificates
- BCreate a stand-alone subordinate CA to issue certificates
- CUse a qualified subordinate CA
- DConfigure certificate template access control lists （ACLs） on ATLCA1