smallstep.com
... But I doubt OpenSSL has changed enough to make this out-of-date.
Reply on news.ycombinator.com