PKI – Hybrid – root ca in the Datacenter

PKI – Hybrid – root ca in the Datacenter

PKI - Can we maintain root CA and HSM in the data center and have issuing CA on the cloud to issue certs, integrated with cloud HSM?