expiration-control
Simple OpenSSL for humans: all you need for X.509 TLS certificates (and nothing more).