http://www.apacheweek.com/features/crl
http://www.openssl.org/docs/apps/req.html
http://www.phildev.net/ssl/opensslconf.html