Configuring a PKI domain