http://www.apacheweek.com/features/crl

http://www.openssl.org/docs/apps/req.html

http://www.phildev.net/ssl/opensslconf.html