issue a certificate
keys generated here never leave the box except inside the p12
| cn | role | principal | serial | expires | state |
|---|
| id | profile | contact | age | state |
|---|
grant administrator
| name | role | cn | expires | state |
|---|
trust material
Install the root on any machine or browser that should trust
nullzero.fun certificates. The CRL is served from
and every issued certificate points at it.