Everything you should know about certificates and PKI but are too afraid to ask (smallstep.com)

Pretty detailed write-up with lots of supplemental reading and enough sass/style to keep it interesting. I learned quite a bit.