openssl.conf + scripts to quickly setup chained CAs