https://www.digitalocean.com/community/tutorials/how-to-set-up-and-configure-a-certificate-authority-ca-on-debian-10
https://wiki.archlinux.org/title/Easy-RSA
https://github.com/OpenVPN/easy-rsa-old/blob/master/easy-rsa/2.0/pkitool