This presentation reviews the concepts of certificates and certificate authorities and covers the creation and maintenance of a private certificate authority using Openssl. Also covered are various aspects of implementing the CA, such as installing certificates, root-certificates for CA, and certificate revocation lists with Apache + mod_ssl.