@josh you dont do puppetserver, right? there is an open request to use UUIDs for serials jn the CA, and nit an incremental number. that would hp a lot for HA/active/active CA (CC: @Lumiere)