The computer system or systems that process certification authority (CA) software and/or have access to the CA private keys, end entity keys, or end entity public keys prior to certification.
Source(s):
CNSSI 4009-2015
from
NIST CP-1