@annika got you, I also have a little bash script here : https://200013.net/doc/linux/openssl/create_pki.html