Certificate enrollment policy provides the locations of certification authorities (CAs) and the types of certificates that can be requested.