That paper was previously on SANS but seems gone. Here's the link anyways: http://www.sans.org/rr/encryption/PKI_101.php If you find it somewhere, perhaps posting the link of the updated version would be good.