Totally custom, self-maintained PKI

I think I understand this but I would like to try it out to be sure :slight_smile: