For educational reasons I've decided to create my own CA. Here is what I learned.
Lets get some context first.
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDNB/bC0UfRPKRjoOawJIN/vznujxKqahTT+Lav/VFiEIrfzBSWqvtR9ys1JvzlGfL4u++1DCmmi5xzvr7x/3uWhRRS/MPkVJZ0tiEOmsbmyRcbMxgc2UB4TdJkoC6jTCWUKLRcCi3UaVZ6u/oWD2QdFggD544nx71jHYJYYOETqsZVWycveMi+20fQXXFu569YxHYPGZzCXu9dEVmDrnhIPV95A8dPzvImczqBrg4D3Ui++v8kgC3RDJyM4piZV7uIYSYO9vXdkzdGivYBFePsEhMuFDY/VReD8Fhtojy5DIEwjIsu1rLy3KJlOAh1R72g3rAw9Ra9R0lYteVyWldM622L2XovouHDqi/oQnxSPjxwqPQ/HaBUi17IdXHO7I+Uhjh9z/YAGseHMH2qrOd+QdUiljDCv9r7qlF0DOUrjn3drSPJSaAY7cLQwIpGwF2IpWo/gv880feLIHt3jlOvHNVFSXlyvrBA6E4Wh1lzutamz7831irok6Err6O0+mE= desmond@desvpn |
ssh-rsa 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 yubikey |