@nprofile1q... SmallStep CA will do all that for you if you want (and you don't have to run it in a container...)
@nprofile1q... has docs (but is running podman containers)
@nprofile1q... has docs (but is running podman containers)