Further reading

Explanations about TLS and OpenSSL:

• OpenSSL Tutorial: How Do SSL Certificate, Private keys, and CSRs Work?: https://phoenixnap.com/kb/openssl-tutorial-ssl-certificates-private-keys-csrs
• Transport Layer Security version 1.3 in Red Hat 8: https://www.redhat.com/en/blog/transport-layer-security-version-13-red-hat-enterprise-linux-8
• The OpenSSL website: https://www.openssl.org/
• Feisty Duck Publishing, who offer books, training, and newsletters about OpenSSL: https://www.feistyduck.com/

Problems with EV certificates:

• Chrome browser moving EV UI to Page Info: https://chromium.googlesource.com/chromium/src/+/HEAD/docs/security/ev-to-page-info.md
• Extended validation is broken: https://www.cyberscoop.com/easy-fake-extended-validation-certificates-research-shows/
• EV certificates issued with “Default City” as the location: https://groups.google.com/forum/#!topic/mozilla.dev.security.policy/1oReSOPCNy0
...