I've got several huge ca (>60k active certs and 200k in crl) and currently, puppet ssl bootstrap take 32 secs no antropy issue, just disks stuff