https://www.digitalocean.com/community/tutorials/how-to-set-up-and-configure-a-certificate-authority-ca-on-debian-10
https://wiki.archlinux.org/title/Easy-RSA