MiniCA[0] works for this, quite trivial to setup and stamp out certs.

[0] https://github.com/jsha/minica