(see also: https://github.com/creachadair/tlsutil)
- Generate a self-signed certificate (Go stdlib)
- Generate a CA cert and a cert signed by it (Filippo)
- Test examples for certificate manipulations (Go stdlib)
- Generate and sign a certificate with a CA
A "CA" certificate is basically just a self-signed certificate that someone has blessed. There are a few pedantic details you have to get right in the cert settings if you want a browser to accept it (particularly an older browser), but CLI tools seem to be less picky.