Achieve zero-trust certificate issuance with CAS