https://jamielinux.com/docs/openssl-certificate-authority/in... is a guide I found useful when trying to learn about this space.