Dan Langille's Other Diary
He has another, more popular, diary. This one is more general.
OpenSSL
OpenVPN: unsupported certificate purpose
SSL client vs server certificates and bacula-fd
acme.sh: getting free SSL certificates – installation configuration on FreeBSD