We have users that go to production before they've taken ownership of
their PKI. This means the "issuer" of their devices is the Foundries
default online CA. We've added a new API to retrieve this so that users
can add this value to their allowed CAs list for their EST server.
Signed-off-by: Andy Doan <andy@foundries.io>
Before this change you could only rotate certs for devices that were
signed by the local-ca configured for this server. This allows you to
use a list of CAs (like we do for our managed instance)
Signed-off-by: Andy Doan <andy@foundries.io>
