https://unixcop.com/certificate-authority-with-openssl/