nanoca Absolute minimal CA based on openssl and bash. Install Clone git clone https://github.com/langedrag/nanoca Install cd nanoca ./ca-init Use Issue certificate ./ca-issue hostname.example.com Revoke certificate ./ca-revoke hostname.example.com Run OCSP server ./ca-ocsp