Indeed, it's all in the X.509 section.  My problem is that it's not mentioned in
"6.1 System Installation".

I'll add a link to the X.509 node if no one disagrees.

-- 
Pierre Neidhardt
https://ambrevar.xyz/