An engineer needs to automate the issuance and renewal of publicly trusted TLS certificates for a web server without manually generating CSRs each time. According to the LPIC-3 cryptography objectives, which combination of technologies should the engineer study for this task?