@nprofile1q... Fun, learning, but also to have some valid, not self-signed (but still self-signed) certs for some bits and pieces.

But whether I stick with an openssl approach is an entirely different matter!