I can find what CFSSL[1] and Vault[2] are, but not XYZ in this context.

Also, all of this can be done with plain openssl, there is no need for additional tools.

[1] https://blog.cloudflare.com/introducing-cfssl/ [2] https://www.vaultproject.io/intro/