Some knowlege from the top of my head

My personal blog

  1. CSR attestation with Yubikey Manager

  2. Pretty list of certificate authorities that AD trusts for auth