Minimal X.509 certificate authority.