Installation and Configuration of a Ceritificate Authority

SSH onto the server that will become your certificate authority:

sudo apt install easy-rsa
sudo mkdir /srv/weepytests_rootca
sudo chmod 700 /srv/weepytests_rootca
sudo chown -R blair: /srv/weepytests_rootca
ln -s /usr/share/easy-rsa/* /srv/weepytests_rootca
vim vars
***
set_var EASYRSA_REQ_COUNTRY    "CA"
set_var EASYRSA_REQ_PROVINCE   "ON"
set_var EASYRSA_REQ_CITY       "Toronto"
set_var EASYRSA_REQ_ORG        "WeepyTests"
set_var EASYRSA_REQ_EMAIL      "admin@weepytests.com"
set_var EASYRSA_REQ_OU         "Certificate Management"
set_var EASYRSA_ALGO           "ec"
set_var EASYRSA_DIGEST         "sha512"
***
./easy-rsa init-pki
./easy-rsa build-ca
cp pki/root.ca ~/weepytests.com.root.ca.crt

Reference Tutorial

Creating a Basic SSL Certificate