diff --git a/cmd/api/src/test/integration/harnesses/enrollonbehalfof-1.svg b/cmd/api/src/test/integration/harnesses/enrollonbehalfof-1.svg
index 4f22563a8..6fcfa6838 100644
--- a/cmd/api/src/test/integration/harnesses/enrollonbehalfof-1.svg
+++ b/cmd/api/src/test/integration/harnesses/enrollonbehalfof-1.svg
@@ -1,18 +1 @@
-<!--
-Copyright 2024 Specter Ops, Inc.
-
-Licensed under the Apache License, Version 2.0
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-
-SPDX-License-Identifier: Apache-2.0
--->
-<svg xmlns="http://www.w3.org/2000/svg" width="921" height="845" viewBox="0 0 921 845"><defs><style type="text/css"/></defs><g transform="translate(190.30110474644664 4) scale(1)"><g class="relationship"><g transform="translate(433.6313891898351 50) rotate(0)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 158.4616592191594 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(183.32380983690769 0) rotate(0)" stroke="none"/></g><g transform="translate(542.3622187994148 50) rotate(0) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-62.6484375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="125.296875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">NTAuthStoreFor</text></g></g></g></g><g class="relationship"><g transform="translate(433.6313891898351 327.97628342478527) rotate(-90)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 194.11413280703695 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(218.97628342478527 0) rotate(0)" stroke="none"/></g><g transform="translate(433.6313891898351 201.41921702126677) rotate(90) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-70.3515625 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="140.703125" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">TrustedForNTAuth</text></g></g></g></g><g class="relationship"><g transform="translate(75 327.97628342478527) rotate(0)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 274.7692385720868 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(299.6313891898351 0) rotate(0)" stroke="none"/></g><g transform="translate(241.8846192860434 327.97628342478527) rotate(0) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(176.03558347937087 605.9525668495705) rotate(-47.179262552307804)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 295.11860518164553 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(319.9807557993938 0) rotate(0)" stroke="none"/></g><g transform="translate(296.3839996231144 476.0824187567895) rotate(-47.179262552307804) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(454.01086036954564 605.2045130499298) rotate(-94.20433793162489)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 194.1141328070369 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(218.9762834247852 0) rotate(0)" stroke="none"/></g><g transform="translate(444.7324929650218 478.9880206451286) rotate(85.7956620683751) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(675.9551990267428 327.97628342478527) rotate(-90)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 194.11413280703695 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(218.97628342478527 0) rotate(0)" stroke="none"/></g><g transform="translate(675.9551990267428 201.41921702126677) rotate(90) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-45.01171875 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="90.0234375" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">RootCAFor</text></g></g></g></g><g class="relationship"><g transform="translate(433.6313891898351 327.97628342478527) rotate(0)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 158.4616592191594 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(183.32380983690769 0) rotate(0)" stroke="none"/></g><g transform="translate(542.3622187994148 327.97628342478527) rotate(0) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-64.57421875 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="129.1484375" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnterpriseCAFor</text></g></g></g></g><g class="relationship"><g transform="translate(75 327.97628342478527) rotate(70.02539571192277)" stroke-width="5" stroke="#68ccca"><path d="M 59 0 L 211.90634546605278 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#68ccca" transform="translate(236.7684960838011 0) rotate(0)" stroke="none"/></g><g transform="translate(121.27129164336606 455.2811520398451) rotate(70.02539571192277) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-67.25390625 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="134.5078125" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnrollOnBehalfOf</text></g></g></g></g><g class="relationship"><g transform="translate(454.01086036954564 605.2045130499298) rotate(179.84581282700933)" stroke-width="5" stroke="#68ccca"><path d="M 59 0 L 194.11413280703684 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#68ccca" transform="translate(218.97628342478515 0) rotate(0)" stroke="none"/></g><g transform="translate(327.45425222119184 605.545087048647) rotate(359.84581282700935) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-67.25390625 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="134.5078125" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnrollOnBehalfOf</text></g></g></g></g><g class="relationship"><g transform="translate(176.03558347937087 605.9525668495705) rotate(124.93560426946605)" stroke-width="5" stroke="#68ccca"><path d="M 58.695178092152055 -5.989663490593892 L 95.96898050729241 -9.793341079425122 A 40 40 0 0 1 100.0297693144747 -10 L 118 -10 L 226 -10 A 10 10 0 0 1 236 -1.7763568394002505e-15 L 236 0 L 236 1.7763568394002505e-15 A 10 10 0 0 1 226 10 L 118 10 L 100.0297693144747 10 A 40 40 0 0 0 95.96898050729241 9.793341079425122 L 83.42887907965451 8.513662064369711 L 83.42887907965451 8.513662064369711"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#68ccca" transform="rotate(185.8266894420084) translate(-59 0)" stroke="none"/></g><g transform="translate(46.615459702719136 791.2265033912118) rotate(34.93560426946605) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-67.25390625 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="134.5078125" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnrollOnBehalfOf</text></g></g></g></g><g class="node"><g fill="#68ccca" stroke="#000000" stroke-width="4"><circle cx="675.9551990267428" cy="50" r="52"/></g><g transform="translate(675.9551990267428 50)"><g transform="scale(0.4296880703125) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">Domain1</text></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="75" cy="327.97628342478527" r="52"/></g><g transform="translate(75 327.97628342478527)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate1-1</text></g></g></g><g transform="translate(-39.597979746446654 -77.99797974644666)"><g transform="translate(0 0)"><g transform="translate(-225.703125 0)" fill="white"><rect x="0" y="0" width="225.703125" height="38.4" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="116.4921875" y="14.1" stroke="none">schemaversion:</text><text xml:space="preserve" x="120.9375" y="14.1" stroke="none" text-anchor="start">2</text><text xml:space="preserve" x="116.4921875" y="33.3" stroke="none" text-anchor="end">effectiveekus:</text><text xml:space="preserve" x="120.9375" y="33.3" stroke="none" text-anchor="start">["2.5.29.37.0"]</text></g></g></g></g></g></g><g class="node"><g fill="#7b64ff" stroke="#000000" stroke-width="4"><circle cx="433.6313891898351" cy="50" r="52"/></g><g transform="translate(433.6313891898351 50)"><g transform="scale(0.28125071874999996) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">NTAuthStore1</text></g></g></g></g></g><g class="node"><g fill="#b0bc00" stroke="#000000" stroke-width="4"><circle cx="433.6313891898351" cy="327.97628342478527" r="52"/></g><g transform="translate(433.6313891898351 327.97628342478527)"><g transform="scale(0.27148510351562494) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">EnterpriseCA1</text></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="176.03558347937087" cy="605.9525668495705" r="52"/></g><g transform="translate(176.03558347937087 605.9525668495705)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate1-2</text></g></g></g><g transform="translate(-39.597979746446654 39.59797974644666)"><g transform="translate(0 0)"><g transform="translate(-225.703125 0)" fill="white"><rect x="0" y="0" width="225.703125" height="38.4" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="116.4921875" y="14.1" stroke="none">schemaversion:</text><text xml:space="preserve" x="120.9375" y="14.1" stroke="none" text-anchor="start">1</text><text xml:space="preserve" x="116.4921875" y="33.3" stroke="none" text-anchor="end">effectiveekus:</text><text xml:space="preserve" x="120.9375" y="33.3" stroke="none" text-anchor="start">["2.5.29.37.0"]</text></g></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="454.01086036954564" cy="605.2045130499298" r="52"/></g><g transform="translate(454.01086036954564 605.2045130499298)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate1-3</text></g></g></g><g transform="translate(39.59797974644666 39.597979746446654)"><g transform="translate(0 0)"><g transform="translate(0 0)" fill="white"><rect x="0" y="0" width="225.703125" height="38.4" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="116.4921875" y="14.1" stroke="none">schemaversion:</text><text xml:space="preserve" x="120.9375" y="14.1" stroke="none" text-anchor="start">2</text><text xml:space="preserve" x="116.4921875" y="33.3" stroke="none" text-anchor="end">effectiveekus:</text><text xml:space="preserve" x="120.9375" y="33.3" stroke="none" text-anchor="start">["2.5.29.37.0"]</text></g></g></g></g></g></g><g class="node"><g fill="#e27300" stroke="#000000" stroke-width="4"><circle cx="675.9551990267428" cy="327.97628342478527" r="52"/></g><g transform="translate(675.9551990267428 327.97628342478527)"><g transform="scale(0.421875578125) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">RootCA1</text></g></g></g></g></g></g></svg>
+<svg xmlns="http://www.w3.org/2000/svg" width="921" height="845" viewBox="0 0 921 845"><defs><style type="text/css"/></defs><g transform="translate(190.30110474644664 4) scale(1)"><g class="relationship"><g transform="translate(433.6313891898351 50) rotate(0)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 158.4616592191594 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(183.32380983690769 0) rotate(0)" stroke="none"/></g><g transform="translate(542.3622187994148 50) rotate(0) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-62.6484375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="125.296875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">NTAuthStoreFor</text></g></g></g></g><g class="relationship"><g transform="translate(433.6313891898351 327.97628342478527) rotate(-90)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 194.11413280703695 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(218.97628342478527 0) rotate(0)" stroke="none"/></g><g transform="translate(433.6313891898351 201.41921702126677) rotate(90) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-70.3515625 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="140.703125" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">TrustedForNTAuth</text></g></g></g></g><g class="relationship"><g transform="translate(75 327.97628342478527) rotate(0)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 274.7692385720868 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(299.6313891898351 0) rotate(0)" stroke="none"/></g><g transform="translate(241.8846192860434 327.97628342478527) rotate(0) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(176.03558347937087 605.9525668495705) rotate(-47.179262552307804)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 295.11860518164553 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(319.9807557993938 0) rotate(0)" stroke="none"/></g><g transform="translate(296.3839996231144 476.0824187567895) rotate(-47.179262552307804) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(454.01086036954564 605.2045130499298) rotate(-94.20433793162489)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 194.1141328070369 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(218.9762834247852 0) rotate(0)" stroke="none"/></g><g transform="translate(444.7324929650218 478.9880206451286) rotate(85.7956620683751) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(675.9551990267428 327.97628342478527) rotate(-90)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 194.11413280703695 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(218.97628342478527 0) rotate(0)" stroke="none"/></g><g transform="translate(675.9551990267428 201.41921702126677) rotate(90) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-45.01171875 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="90.0234375" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">RootCAFor</text></g></g></g></g><g class="relationship"><g transform="translate(433.6313891898351 327.97628342478527) rotate(0)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 158.4616592191594 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(183.32380983690769 0) rotate(0)" stroke="none"/></g><g transform="translate(542.3622187994148 327.97628342478527) rotate(0) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-64.57421875 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="129.1484375" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnterpriseCAFor</text></g></g></g></g><g class="relationship"><g transform="translate(75 327.97628342478527) rotate(70.02539571192277)" stroke-width="5" stroke="#68ccca"><path d="M 59 0 L 211.90634546605278 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#68ccca" transform="translate(236.7684960838011 0) rotate(0)" stroke="none"/></g><g transform="translate(121.27129164336606 455.2811520398451) rotate(70.02539571192277) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-67.25390625 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="134.5078125" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnrollOnBehalfOf</text></g></g></g></g><g class="relationship"><g transform="translate(454.01086036954564 605.2045130499298) rotate(179.84581282700933)" stroke-width="5" stroke="#68ccca"><path d="M 59 0 L 194.11413280703684 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#68ccca" transform="translate(218.97628342478515 0) rotate(0)" stroke="none"/></g><g transform="translate(327.45425222119184 605.545087048647) rotate(359.84581282700935) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-67.25390625 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="134.5078125" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnrollOnBehalfOf</text></g></g></g></g><g class="relationship"><g transform="translate(176.03558347937087 605.9525668495705) rotate(124.93560426946605)" stroke-width="5" stroke="#68ccca"><path d="M 58.695178092152055 -5.989663490593892 L 95.96898050729241 -9.793341079425122 A 40 40 0 0 1 100.0297693144747 -10 L 118 -10 L 226 -10 A 10 10 0 0 1 236 -1.7763568394002505e-15 L 236 0 L 236 1.7763568394002505e-15 A 10 10 0 0 1 226 10 L 118 10 L 100.0297693144747 10 A 40 40 0 0 0 95.96898050729241 9.793341079425122 L 83.42887907965451 8.513662064369711 L 83.42887907965451 8.513662064369711"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#68ccca" transform="rotate(185.8266894420084) translate(-59 0)" stroke="none"/></g><g transform="translate(46.615459702719136 791.2265033912118) rotate(34.93560426946605) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-67.25390625 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="134.5078125" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnrollOnBehalfOf</text></g></g></g></g><g class="node"><g fill="#68ccca" stroke="#000000" stroke-width="4"><circle cx="675.9551990267428" cy="50" r="52"/></g><g transform="translate(675.9551990267428 50)"><g transform="scale(0.4296880703125) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">Domain1</text></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="75" cy="327.97628342478527" r="52"/></g><g transform="translate(75 327.97628342478527)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate1-1</text></g></g></g><g transform="translate(-39.597979746446654 -77.99797974644666)"><g transform="translate(0 0)"><g transform="translate(-225.703125 0)" fill="white"><rect x="0" y="0" width="225.703125" height="38.4" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="116.4921875" y="14.1" stroke="none">schemaversion:</text><text xml:space="preserve" x="120.9375" y="14.1" stroke="none" text-anchor="start">2</text><text xml:space="preserve" x="116.4921875" y="33.3" stroke="none" text-anchor="end">effectiveekus:</text><text xml:space="preserve" x="120.9375" y="33.3" stroke="none" text-anchor="start">["2.5.29.37.0"]</text></g></g></g></g></g></g><g class="node"><g fill="#7b64ff" stroke="#000000" stroke-width="4"><circle cx="433.6313891898351" cy="50" r="52"/></g><g transform="translate(433.6313891898351 50)"><g transform="scale(0.28125071874999996) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">NTAuthStore1</text></g></g></g></g></g><g class="node"><g fill="#b0bc00" stroke="#000000" stroke-width="4"><circle cx="433.6313891898351" cy="327.97628342478527" r="52"/></g><g transform="translate(433.6313891898351 327.97628342478527)"><g transform="scale(0.27148510351562494) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">EnterpriseCA1</text></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="176.03558347937087" cy="605.9525668495705" r="52"/></g><g transform="translate(176.03558347937087 605.9525668495705)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate1-2</text></g></g></g><g transform="translate(-39.597979746446654 39.59797974644666)"><g transform="translate(0 0)"><g transform="translate(-225.703125 0)" fill="white"><rect x="0" y="0" width="225.703125" height="38.4" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="116.4921875" y="14.1" stroke="none">schemaversion:</text><text xml:space="preserve" x="120.9375" y="14.1" stroke="none" text-anchor="start">1</text><text xml:space="preserve" x="116.4921875" y="33.3" stroke="none" text-anchor="end">effectiveekus:</text><text xml:space="preserve" x="120.9375" y="33.3" stroke="none" text-anchor="start">["2.5.29.37.0"]</text></g></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="454.01086036954564" cy="605.2045130499298" r="52"/></g><g transform="translate(454.01086036954564 605.2045130499298)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate1-3</text></g></g></g><g transform="translate(39.59797974644666 39.597979746446654)"><g transform="translate(0 0)"><g transform="translate(0 0)" fill="white"><rect x="0" y="0" width="225.703125" height="38.4" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="116.4921875" y="14.1" stroke="none">schemaversion:</text><text xml:space="preserve" x="120.9375" y="14.1" stroke="none" text-anchor="start">2</text><text xml:space="preserve" x="116.4921875" y="33.3" stroke="none" text-anchor="end">effectiveekus:</text><text xml:space="preserve" x="120.9375" y="33.3" stroke="none" text-anchor="start">["2.5.29.37.0"]</text></g></g></g></g></g></g><g class="node"><g fill="#e27300" stroke="#000000" stroke-width="4"><circle cx="675.9551990267428" cy="327.97628342478527" r="52"/></g><g transform="translate(675.9551990267428 327.97628342478527)"><g transform="scale(0.421875578125) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">RootCA1</text></g></g></g></g></g></g></svg>
\ No newline at end of file
diff --git a/cmd/api/src/test/integration/harnesses/enrollonbehalfof-2.svg b/cmd/api/src/test/integration/harnesses/enrollonbehalfof-2.svg
index 96181905f..d8d8ec0fc 100644
--- a/cmd/api/src/test/integration/harnesses/enrollonbehalfof-2.svg
+++ b/cmd/api/src/test/integration/harnesses/enrollonbehalfof-2.svg
@@ -1,18 +1 @@
-<!--
-Copyright 2024 Specter Ops, Inc.
-
-Licensed under the Apache License, Version 2.0
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-
-SPDX-License-Identifier: Apache-2.0
--->
-<svg xmlns="http://www.w3.org/2000/svg" width="1077" height="760" viewBox="0 0 1077 760"><defs><style type="text/css"/></defs><g transform="translate(365.05110474644664 4) scale(1)"><g class="relationship"><g transform="translate(415.0216781311826 50) rotate(0)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 158.4616592191594 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(183.32380983690769 0) rotate(0)" stroke="none"/></g><g transform="translate(523.7525077407623 50) rotate(0) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-62.6484375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="125.296875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">NTAuthStoreFor</text></g></g></g></g><g class="relationship"><g transform="translate(415.0216781311826 327.97628342478527) rotate(-90)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 194.11413280703695 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(218.97628342478527 0) rotate(0)" stroke="none"/></g><g transform="translate(415.0216781311826 201.41921702126677) rotate(90) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-70.3515625 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="140.703125" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">TrustedForNTAuth</text></g></g></g></g><g class="relationship"><g transform="translate(657.3454879680903 327.97628342478527) rotate(-90)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 194.11413280703695 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(218.97628342478527 0) rotate(0)" stroke="none"/></g><g transform="translate(657.3454879680903 201.41921702126677) rotate(90) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-45.01171875 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="90.0234375" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">RootCAFor</text></g></g></g></g><g class="relationship"><g transform="translate(415.0216781311826 327.97628342478527) rotate(0)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 158.4616592191594 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(183.32380983690769 0) rotate(0)" stroke="none"/></g><g transform="translate(523.7525077407623 327.97628342478527) rotate(0) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-64.57421875 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="129.1484375" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnterpriseCAFor</text></g></g></g></g><g class="relationship"><g transform="translate(75 327.97628342478527) rotate(0)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 256.15952751343434 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(281.0216781311826 0) rotate(0)" stroke="none"/></g><g transform="translate(232.57976375671717 327.97628342478527) rotate(0) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(75 524.287890824132) rotate(-30.000000000000014)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 308.7610641809449 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(333.62321479869325 0) rotate(0)" stroke="none"/></g><g transform="translate(234.2452120517488 432.3476247788957) rotate(-30.000000000000014) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(245.01083906559165 622.4436945238048) rotate(-60.00000000000002)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 256.1595275134339 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(281.02167813118217 0) rotate(0)" stroke="none"/></g><g transform="translate(323.80072094395007 485.9756159881375) rotate(-60.00000000000002) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(531.0216781311826 622.4436945238048) rotate(-111.50104465455937)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 232.62964421958858 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(257.4917948373369 0) rotate(0)" stroke="none"/></g><g transform="translate(477.5778933612505 486.77599676057105) rotate(68.49895534544063) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(75 327.97628342478527) rotate(59.99999999999992)" stroke-width="5" stroke="#a4dd00"><path d="M 59 0 L 256.1595275134342 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#a4dd00" transform="translate(281.0216781311825 0) rotate(0)" stroke="none"/></g><g transform="translate(153.78988187835876 464.4443619604525) rotate(59.99999999999992) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-67.25390625 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="134.5078125" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnrollOnBehalfOf</text></g></g></g></g><g class="node"><g fill="#68ccca" stroke="#000000" stroke-width="4"><circle cx="657.3454879680903" cy="50" r="52"/></g><g transform="translate(657.3454879680903 50)"><g transform="scale(0.4296880703125) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">Domain2</text></g></g></g></g></g><g class="node"><g fill="#7b64ff" stroke="#000000" stroke-width="4"><circle cx="415.0216781311826" cy="50" r="52"/></g><g transform="translate(415.0216781311826 50)"><g transform="scale(0.28125071874999996) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">NTAuthStore2</text></g></g></g></g></g><g class="node"><g fill="#b0bc00" stroke="#000000" stroke-width="4"><circle cx="415.0216781311826" cy="327.97628342478527" r="52"/></g><g transform="translate(415.0216781311826 327.97628342478527)"><g transform="scale(0.27148510351562494) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">EnterpriseCA2</text></g></g></g></g></g><g class="node"><g fill="#e27300" stroke="#000000" stroke-width="4"><circle cx="657.3454879680903" cy="327.97628342478527" r="52"/></g><g transform="translate(657.3454879680903 327.97628342478527)"><g transform="scale(0.421875578125) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">RootCA2</text></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="75" cy="327.97628342478527" r="52"/></g><g transform="translate(75 327.97628342478527)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate2-1</text></g></g></g><g transform="translate(-39.597979746446654 -77.99797974644666)"><g transform="translate(0 0)"><g transform="translate(-300.1328125 0)" fill="white"><rect x="0" y="0" width="300.1328125" height="38.4" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="116.4921875" y="14.1" stroke="none">effectiveekus:</text><text xml:space="preserve" x="120.9375" y="14.1" stroke="none" text-anchor="start">["1.3.6.1.4.1.311.20.2.1"]</text><text xml:space="preserve" x="116.4921875" y="33.3" stroke="none" text-anchor="end">schemaversion:</text><text xml:space="preserve" x="120.9375" y="33.3" stroke="none" text-anchor="start">2</text></g></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="75" cy="524.287890824132" r="52"/></g><g transform="translate(75 524.287890824132)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate2-2</text></g></g></g><g transform="translate(-39.597979746446654 39.59797974644666)"><g transform="translate(0 0)"><g transform="translate(-400.453125 0)" fill="white"><rect x="0" y="0" width="400.453125" height="38.4" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="116.4921875" y="14.1" stroke="none">effectiveekus:</text><text xml:space="preserve" x="120.9375" y="14.1" stroke="none" text-anchor="start">["1.3.6.1.4.1.311.20.2.1", "2.5.29.37.0"]</text><text xml:space="preserve" x="116.4921875" y="33.3" stroke="none" text-anchor="end">schemaversion:</text><text xml:space="preserve" x="120.9375" y="33.3" stroke="none" text-anchor="start">2</text></g></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="245.01083906559165" cy="622.4436945238048" r="52"/></g><g transform="translate(245.01083906559165 622.4436945238048)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate2-3</text></g></g></g><g transform="translate(3.429011037612589e-15 56)"><g transform="translate(0 0)"><g transform="translate(-170.53515625 0)" fill="white"><rect x="0" y="0" width="341.0703125" height="76.8" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="157.4296875" y="14.1" stroke="none">effectiveekus:</text><text xml:space="preserve" x="161.875" y="14.1" stroke="none" text-anchor="start">[]</text><text xml:space="preserve" x="157.4296875" y="33.3" stroke="none" text-anchor="end">schemaversion:</text><text xml:space="preserve" x="161.875" y="33.3" stroke="none" text-anchor="start">2</text><text xml:space="preserve" x="157.4296875" y="52.5" stroke="none" text-anchor="end">authorizedsignatures:</text><text xml:space="preserve" x="161.875" y="52.5" stroke="none" text-anchor="start">1</text><text xml:space="preserve" x="157.4296875" y="71.7" stroke="none" text-anchor="end">applicationpolicies:</text><text xml:space="preserve" x="161.875" y="71.7" stroke="none" text-anchor="start">["1.3.6.1.4.1.311.20.2.1"]</text></g></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="531.0216781311826" cy="622.4436945238048" r="52"/></g><g transform="translate(531.0216781311826 622.4436945238048)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate2-4</text></g></g></g><g transform="translate(3.429011037612589e-15 56)"><g transform="translate(0 0)"><g transform="translate(-87.609375 0)" fill="white"><rect x="0" y="0" width="175.21875" height="76.8" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="157.4296875" y="14.1" stroke="none">effectiveekus:</text><text xml:space="preserve" x="161.875" y="14.1" stroke="none" text-anchor="start">[]</text><text xml:space="preserve" x="157.4296875" y="33.3" stroke="none" text-anchor="end">schemaversion:</text><text xml:space="preserve" x="161.875" y="33.3" stroke="none" text-anchor="start">2</text><text xml:space="preserve" x="157.4296875" y="52.5" stroke="none" text-anchor="end">authorizedsignatures:</text><text xml:space="preserve" x="161.875" y="52.5" stroke="none" text-anchor="start">1</text><text xml:space="preserve" x="157.4296875" y="71.7" stroke="none" text-anchor="end">applicationpolicies:</text><text xml:space="preserve" x="161.875" y="71.7" stroke="none" text-anchor="start">[]</text></g></g></g></g></g></g></g></svg>
+<svg xmlns="http://www.w3.org/2000/svg" width="1077" height="760" viewBox="0 0 1077 760"><defs><style type="text/css"/></defs><g transform="translate(365.05110474644664 4) scale(1)"><g class="relationship"><g transform="translate(415.0216781311826 50) rotate(0)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 158.4616592191594 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(183.32380983690769 0) rotate(0)" stroke="none"/></g><g transform="translate(523.7525077407623 50) rotate(0) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-62.6484375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="125.296875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">NTAuthStoreFor</text></g></g></g></g><g class="relationship"><g transform="translate(415.0216781311826 327.97628342478527) rotate(-90)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 194.11413280703695 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(218.97628342478527 0) rotate(0)" stroke="none"/></g><g transform="translate(415.0216781311826 201.41921702126677) rotate(90) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-70.3515625 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="140.703125" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">TrustedForNTAuth</text></g></g></g></g><g class="relationship"><g transform="translate(657.3454879680903 327.97628342478527) rotate(-90)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 194.11413280703695 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(218.97628342478527 0) rotate(0)" stroke="none"/></g><g transform="translate(657.3454879680903 201.41921702126677) rotate(90) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-45.01171875 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="90.0234375" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">RootCAFor</text></g></g></g></g><g class="relationship"><g transform="translate(415.0216781311826 327.97628342478527) rotate(0)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 158.4616592191594 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(183.32380983690769 0) rotate(0)" stroke="none"/></g><g transform="translate(523.7525077407623 327.97628342478527) rotate(0) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-64.57421875 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="129.1484375" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnterpriseCAFor</text></g></g></g></g><g class="relationship"><g transform="translate(75 327.97628342478527) rotate(0)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 256.15952751343434 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(281.0216781311826 0) rotate(0)" stroke="none"/></g><g transform="translate(232.57976375671717 327.97628342478527) rotate(0) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(75 524.287890824132) rotate(-30.000000000000014)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 308.7610641809449 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(333.62321479869325 0) rotate(0)" stroke="none"/></g><g transform="translate(234.2452120517488 432.3476247788957) rotate(-30.000000000000014) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(245.01083906559165 622.4436945238048) rotate(-60.00000000000002)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 256.1595275134339 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(281.02167813118217 0) rotate(0)" stroke="none"/></g><g transform="translate(323.80072094395007 485.9756159881375) rotate(-60.00000000000002) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(531.0216781311826 622.4436945238048) rotate(-111.50104465455937)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 232.62964421958858 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(257.4917948373369 0) rotate(0)" stroke="none"/></g><g transform="translate(477.5778933612505 486.77599676057105) rotate(68.49895534544063) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(75 327.97628342478527) rotate(59.99999999999992)" stroke-width="5" stroke="#a4dd00"><path d="M 59 0 L 256.1595275134342 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#a4dd00" transform="translate(281.0216781311825 0) rotate(0)" stroke="none"/></g><g transform="translate(153.78988187835876 464.4443619604525) rotate(59.99999999999992) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-67.25390625 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="134.5078125" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnrollOnBehalfOf</text></g></g></g></g><g class="node"><g fill="#68ccca" stroke="#000000" stroke-width="4"><circle cx="657.3454879680903" cy="50" r="52"/></g><g transform="translate(657.3454879680903 50)"><g transform="scale(0.4296880703125) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">Domain2</text></g></g></g></g></g><g class="node"><g fill="#7b64ff" stroke="#000000" stroke-width="4"><circle cx="415.0216781311826" cy="50" r="52"/></g><g transform="translate(415.0216781311826 50)"><g transform="scale(0.28125071874999996) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">NTAuthStore2</text></g></g></g></g></g><g class="node"><g fill="#b0bc00" stroke="#000000" stroke-width="4"><circle cx="415.0216781311826" cy="327.97628342478527" r="52"/></g><g transform="translate(415.0216781311826 327.97628342478527)"><g transform="scale(0.27148510351562494) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">EnterpriseCA2</text></g></g></g></g></g><g class="node"><g fill="#e27300" stroke="#000000" stroke-width="4"><circle cx="657.3454879680903" cy="327.97628342478527" r="52"/></g><g transform="translate(657.3454879680903 327.97628342478527)"><g transform="scale(0.421875578125) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">RootCA2</text></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="75" cy="327.97628342478527" r="52"/></g><g transform="translate(75 327.97628342478527)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate2-1</text></g></g></g><g transform="translate(-39.597979746446654 -77.99797974644666)"><g transform="translate(0 0)"><g transform="translate(-300.1328125 0)" fill="white"><rect x="0" y="0" width="300.1328125" height="38.4" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="116.4921875" y="14.1" stroke="none">effectiveekus:</text><text xml:space="preserve" x="120.9375" y="14.1" stroke="none" text-anchor="start">["1.3.6.1.4.1.311.20.2.1"]</text><text xml:space="preserve" x="116.4921875" y="33.3" stroke="none" text-anchor="end">schemaversion:</text><text xml:space="preserve" x="120.9375" y="33.3" stroke="none" text-anchor="start">2</text></g></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="75" cy="524.287890824132" r="52"/></g><g transform="translate(75 524.287890824132)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate2-2</text></g></g></g><g transform="translate(-39.597979746446654 39.59797974644666)"><g transform="translate(0 0)"><g transform="translate(-400.453125 0)" fill="white"><rect x="0" y="0" width="400.453125" height="38.4" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="116.4921875" y="14.1" stroke="none">effectiveekus:</text><text xml:space="preserve" x="120.9375" y="14.1" stroke="none" text-anchor="start">["1.3.6.1.4.1.311.20.2.1", "2.5.29.37.0"]</text><text xml:space="preserve" x="116.4921875" y="33.3" stroke="none" text-anchor="end">schemaversion:</text><text xml:space="preserve" x="120.9375" y="33.3" stroke="none" text-anchor="start">2</text></g></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="245.01083906559165" cy="622.4436945238048" r="52"/></g><g transform="translate(245.01083906559165 622.4436945238048)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate2-3</text></g></g></g><g transform="translate(3.429011037612589e-15 56)"><g transform="translate(0 0)"><g transform="translate(-170.53515625 0)" fill="white"><rect x="0" y="0" width="341.0703125" height="76.8" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="157.4296875" y="14.1" stroke="none">effectiveekus:</text><text xml:space="preserve" x="161.875" y="14.1" stroke="none" text-anchor="start">[]</text><text xml:space="preserve" x="157.4296875" y="33.3" stroke="none" text-anchor="end">schemaversion:</text><text xml:space="preserve" x="161.875" y="33.3" stroke="none" text-anchor="start">2</text><text xml:space="preserve" x="157.4296875" y="52.5" stroke="none" text-anchor="end">authorizedsignatures:</text><text xml:space="preserve" x="161.875" y="52.5" stroke="none" text-anchor="start">1</text><text xml:space="preserve" x="157.4296875" y="71.7" stroke="none" text-anchor="end">applicationpolicies:</text><text xml:space="preserve" x="161.875" y="71.7" stroke="none" text-anchor="start">["1.3.6.1.4.1.311.20.2.1"]</text></g></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="531.0216781311826" cy="622.4436945238048" r="52"/></g><g transform="translate(531.0216781311826 622.4436945238048)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate2-4</text></g></g></g><g transform="translate(3.429011037612589e-15 56)"><g transform="translate(0 0)"><g transform="translate(-87.609375 0)" fill="white"><rect x="0" y="0" width="175.21875" height="76.8" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="157.4296875" y="14.1" stroke="none">effectiveekus:</text><text xml:space="preserve" x="161.875" y="14.1" stroke="none" text-anchor="start">[]</text><text xml:space="preserve" x="157.4296875" y="33.3" stroke="none" text-anchor="end">schemaversion:</text><text xml:space="preserve" x="161.875" y="33.3" stroke="none" text-anchor="start">2</text><text xml:space="preserve" x="157.4296875" y="52.5" stroke="none" text-anchor="end">authorizedsignatures:</text><text xml:space="preserve" x="161.875" y="52.5" stroke="none" text-anchor="start">1</text><text xml:space="preserve" x="157.4296875" y="71.7" stroke="none" text-anchor="end">applicationpolicies:</text><text xml:space="preserve" x="161.875" y="71.7" stroke="none" text-anchor="start">[]</text></g></g></g></g></g></g></g></svg>
\ No newline at end of file
diff --git a/cmd/api/src/test/integration/harnesses/enrollonbehalfof-3.svg b/cmd/api/src/test/integration/harnesses/enrollonbehalfof-3.svg
index 42dced49a..e93ece036 100644
--- a/cmd/api/src/test/integration/harnesses/enrollonbehalfof-3.svg
+++ b/cmd/api/src/test/integration/harnesses/enrollonbehalfof-3.svg
@@ -1,18 +1 @@
-<!--
-Copyright 2024 Specter Ops, Inc.
-
-Licensed under the Apache License, Version 2.0
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-
-SPDX-License-Identifier: Apache-2.0
--->
 <svg xmlns="http://www.w3.org/2000/svg" width="1057" height="896" viewBox="0 0 1057 896"><defs><style type="text/css"/></defs><g transform="translate(326.6622528543699 4) scale(1)"><g class="relationship"><g transform="translate(433.6313891898351 50) rotate(0)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 158.4616592191594 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(183.32380983690769 0) rotate(0)" stroke="none"/></g><g transform="translate(542.3622187994148 50) rotate(0) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-62.6484375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="125.296875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">NTAuthStoreFor</text></g></g></g></g><g class="relationship"><g transform="translate(433.6313891898351 327.97628342478527) rotate(-90)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 194.11413280703695 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(218.97628342478527 0) rotate(0)" stroke="none"/></g><g transform="translate(433.6313891898351 201.41921702126677) rotate(90) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-70.3515625 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="140.703125" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">TrustedForNTAuth</text></g></g></g></g><g class="relationship"><g transform="translate(-44.95912785436991 327.97628342478527) rotate(0)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 394.7283664264567 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(419.590517044205 0) rotate(0)" stroke="none"/></g><g transform="translate(181.90505535885845 327.97628342478527) rotate(0) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(194.3361306677326 557.3609078601627) rotate(-43.78861262620303)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 247.61865829661255 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(272.48080891436086 0) rotate(0)" stroke="none"/></g><g transform="translate(305.009794318264 451.27089618105714) rotate(-43.78861262620303) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(675.9551990267428 327.97628342478527) rotate(-90)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 194.11413280703695 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(218.97628342478527 0) rotate(0)" stroke="none"/></g><g transform="translate(675.9551990267428 201.41921702126677) rotate(90) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-45.01171875 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="90.0234375" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">RootCAFor</text></g></g></g></g><g class="relationship"><g transform="translate(433.6313891898351 327.97628342478527) rotate(0)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 158.4616592191594 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(183.32380983690769 0) rotate(0)" stroke="none"/></g><g transform="translate(542.3622187994148 327.97628342478527) rotate(0) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-64.57421875 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="129.1484375" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnterpriseCAFor</text></g></g></g></g><g class="relationship"><g transform="translate(-44.95912785436991 327.97628342478527) rotate(43.78861262620303)" stroke-width="5" stroke="#68ccca"><path d="M 59 0 L 247.61865829661255 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#68ccca" transform="translate(272.48080891436086 0) rotate(0)" stroke="none"/></g><g transform="translate(65.71453579616153 434.0662951038908) rotate(43.78861262620303) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-67.25390625 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="134.5078125" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnrollOnBehalfOf</text></g></g></g></g><g class="relationship"><g transform="translate(433.6313891898351 796.6561663822652) rotate(-90)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 212.28261323598704 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(237.14476385373536 0) rotate(0)" stroke="none"/></g><g transform="translate(433.6313891898351 661.0148597642717) rotate(90) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-48.5859375 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="97.171875" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">PublishedTo</text></g></g></g></g><g class="relationship"><g transform="translate(433.6313891898351 500.5114025285298) rotate(-35.45095495632252)" stroke-width="5" stroke="#000000"><path d="M 59 0 L 213.6091860485213 0"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#000000" transform="translate(238.47133666626962 0) rotate(0)" stroke="none"/></g><g transform="translate(544.6667872556458 421.45393952928924) rotate(-35.45095495632252) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-64.57421875 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="129.1484375" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnterpriseCAFor</text></g></g></g></g><g class="relationship"><g transform="translate(194.3361306677326 557.3609078601627) rotate(90)" stroke-width="5" stroke="#68ccca"><path d="M 58.695178092152055 -5.989663490593892 L 95.96898050729241 -9.793341079425122 A 40 40 0 0 1 100.0297693144747 -10 L 118 -10 L 226 -10 A 10 10 0 0 1 236 -1.7763568394002505e-15 L 236 0 L 236 1.7763568394002505e-15 A 10 10 0 0 1 226 10 L 118 10 L 100.0297693144747 10 A 40 40 0 0 0 95.96898050729241 9.793341079425122 L 83.42887907965451 8.513662064369711 L 83.42887907965451 8.513662064369711"/><polygon points="-24.8621506177483,0 -27.62461179749811,9.20820393249937 0,0 -27.62461179749811,-9.20820393249937" fill="#68ccca" transform="rotate(185.8266894420084) translate(-59 0)" stroke="none"/></g><g transform="translate(194.3361306677326 783.3609078601627) rotate(360) translate(0 -13)"><g transform="translate(0 0)"><g transform="translate(-67.25390625 0)" fill="#ffffff" stroke="#000000" stroke-width="0"><rect x="0" y="0" width="134.5078125" height="26" rx="5" ry="5" stroke="none"/><text xml:space="preserve" x="5" y="17.5" stroke="none" text-anchor="left" font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000">EnrollOnBehalfOf</text></g></g></g></g><g class="node"><g fill="#68ccca" stroke="#000000" stroke-width="4"><circle cx="675.9551990267428" cy="50" r="52"/></g><g transform="translate(675.9551990267428 50)"><g transform="scale(0.4296880703125) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">Domain1</text></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="-44.95912785436991" cy="327.97628342478527" r="52"/></g><g transform="translate(-44.95912785436991 327.97628342478527)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate1-1</text></g></g></g><g transform="translate(-56 -19.199999999999992)"><g transform="translate(0 0)"><g transform="translate(-225.703125 0)" fill="white"><rect x="0" y="0" width="225.703125" height="38.4" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="116.4921875" y="14.1" stroke="none">schemaversion:</text><text xml:space="preserve" x="120.9375" y="14.1" stroke="none" text-anchor="start">2</text><text xml:space="preserve" x="116.4921875" y="33.3" stroke="none" text-anchor="end">effectiveekus:</text><text xml:space="preserve" x="120.9375" y="33.3" stroke="none" text-anchor="start">["2.5.29.37.0"]</text></g></g></g></g></g></g><g class="node"><g fill="#7b64ff" stroke="#000000" stroke-width="4"><circle cx="433.6313891898351" cy="50" r="52"/></g><g transform="translate(433.6313891898351 50)"><g transform="scale(0.28125071874999996) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">NTAuthStore1</text></g></g></g></g></g><g class="node"><g fill="#b0bc00" stroke="#000000" stroke-width="4"><circle cx="433.6313891898351" cy="327.97628342478527" r="52"/></g><g transform="translate(433.6313891898351 327.97628342478527)"><g transform="scale(0.27148510351562494) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">EnterpriseCA1</text></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="194.3361306677326" cy="557.3609078601627" r="52"/></g><g transform="translate(194.3361306677326 557.3609078601627)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate1-2</text></g></g></g><g transform="translate(3.429011037612589e-15 56)"><g transform="translate(0 0)"><g transform="translate(-112.8515625 0)" fill="white"><rect x="0" y="0" width="225.703125" height="38.4" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="116.4921875" y="14.1" stroke="none">schemaversion:</text><text xml:space="preserve" x="120.9375" y="14.1" stroke="none" text-anchor="start">1</text><text xml:space="preserve" x="116.4921875" y="33.3" stroke="none" text-anchor="end">effectiveekus:</text><text xml:space="preserve" x="120.9375" y="33.3" stroke="none" text-anchor="start">["2.5.29.37.0"]</text></g></g></g></g></g></g><g class="node"><g fill="#fda1ff" stroke="#000000" stroke-width="4"><circle cx="433.6313891898351" cy="796.6561663822652" r="52"/></g><g transform="translate(433.6313891898351 796.6561663822652)"><g transform="scale(0.24023513476562502) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">CertTemplate1-3</text></g></g></g><g transform="translate(3.429011037612589e-15 56)"><g transform="translate(0 0)"><g transform="translate(-112.8515625 0)" fill="white"><rect x="0" y="0" width="225.703125" height="38.4" rx="0" ry="0" stroke="none"/><g font-family="sans-serif" font-size="16" font-weight="normal" fill="#000000" text-anchor="end"><text xml:space="preserve" x="116.4921875" y="14.1" stroke="none">schemaversion:</text><text xml:space="preserve" x="120.9375" y="14.1" stroke="none" text-anchor="start">2</text><text xml:space="preserve" x="116.4921875" y="33.3" stroke="none" text-anchor="end">effectiveekus:</text><text xml:space="preserve" x="120.9375" y="33.3" stroke="none" text-anchor="start">["2.5.29.37.0"]</text></g></g></g></g></g></g><g class="node"><g fill="#e27300" stroke="#000000" stroke-width="4"><circle cx="675.9551990267428" cy="327.97628342478527" r="52"/></g><g transform="translate(675.9551990267428 327.97628342478527)"><g transform="scale(0.421875578125) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">RootCA1</text></g></g></g></g></g><g class="node"><g fill="#b0bc00" stroke="#000000" stroke-width="4"><circle cx="433.6313891898351" cy="500.5114025285298" r="52"/></g><g transform="translate(433.6313891898351 500.5114025285298)"><g transform="scale(0.27148510351562494) translate(0 0)"><g transform="translate(0 0)"><g font-family="sans-serif" font-size="50" font-weight="normal" fill="#000000" text-anchor="middle"><text xml:space="preserve" x="0" y="13" stroke="none">EnterpriseCA2</text></g></g></g></g></g></g></svg>