general info (creating CA, CA chain, certificate key usage setup) -> https://gist.github.com/Soarez/9688998
ocsp (ocsp server), certificate revocation -> https://bhashineen.medium.com/create-your-own-ocsp-server-ffb212df8e63