openssl… let me count the ways I hate you….
I put a script or two on github; generates a CA and server and client certs, suitable (I hope!) for openvpn and https and all that. Based on the easy-rsa...
You're in trouble now