Ask HN: How to start a CA?