HowTo
Threedy Wiki (internal)
Root CA (for Clients / Browser)
PEM (when you need CRT rename the file)
CA Chains (for services like gitlab-runner)
PEM