Everything you should know about certificates and PKI but are too afraid to ask (smallstep.com)