https://developers.yubico.com/PIV/Guides/Certificate_authority.html https://dennis.silvrback.com/openssl-ca-with-yubikey-neo