Certificate management via EST (RFC7030)

[CardContact]

Is certificate management (e.g. device enrollment, re-certification) something open62541 is already supporting or are there plans to add support ?

Should certificate management be done via OPC UA or an external mechanism like EST ?

A particular interesting questing would be the PKI bootstrap process for devices, like what is proposed in the BRSKI (RFC 8995) extension of EST.

We are happy to contribute code to support EST, as we are currently working on an EST server implementation.