S

sol1-ca

host your own CA on an encrypted loopback device using CFSSL