You need to design a PKI that meets business requirements. What should you do？（）

• A、Move ATLCA1 offline and create an enterprise subordinate CA to issue certificates
• B、Create a stand-alone subordinate CA to issue certificates
• C、Use a qualified subordinate CA
• D、Configure certificate template access control lists （ACLs） on ATLCA1