openssl , Certificate revocation list(CLR)

creating own signed certificate authority
https://jamielinux.com/articles/2013/08/generate-certificate-revocation-list-revoke-certificates/
http://www.dylanbeattie.net/docs/openssl_iis_ssl_howto.html