See [wiki:"faq/security/mfpl-certificate-authority"].