https://blog.itwhisperer.be/tag/pki/https://blog.itwhisperer.be/tag/certificates/https://blog.itwhisperer.be/tag/offlinerootca/https://blog.itwhisperer.be/tag/yubihsm2/https://blog.itwhisperer.be/tag/hsm/