Should a PKI be supported on a firewall (meaning that the certificates would be stored on the firewall and the firewall would distribute certificates on demand)? Explain your answer

What will be an ideal response?

This
depends
on
a
number
of
factors,
but
primarily
performance
requirements
and
the
security
requirements
of
the
certificates.
For
normal
use
cases,
certificates
should
be
created
only
when
the
creator
knows
the
identity
of
the
recipient
with
high
assurance,
and
a
fully
automated
distribution
mechanism
is
therefore
inappropriate