This figure shows the simplest possible CA. A single box titled root CA, online, shows a scenario where a single instance of a CA serves as root CA as well as issuing authority.