Mental Note: Generating x509 Certificates and CAs
No one can remember the incantations required to generate x509 certificates with openssl. One of the things I always dislike having to look up every time I need such.
The following site has a great reference, Makefiles, and configuration for generating your CA, keys, and host certificates en mass. I found it useful and am writing it down so I find it useful again.