Most HSMs used by CAs are pretty trash tbh.