Entrust PKIaaS automatically assigns the following profile to certificate authorities with the OCSP service enabled.