Offline Certificate Authority – What Exactly Does that Mean?