I do intend to write some notes on this topic. I have no useful links; this episode exists because I can't find a howto online that's any good; they all presume the reader is familiar with how a certificate infrastructure works, or they assume the reader knows all about network routing, and so on. So for now, the audio version of the shownotes are embedded in the ogg file. Eventually, I'll write something up. Ideally, I'll write down the entire server series!