The "client-certificate-authentication" section in docs is not self-explanatory

[bwsw]

Needs rework. It is absolutely not clear how the certificate lifecycle works. Why does CA require CRL? What about sequential numbers?

The manual MUST provide a self-containing guide on how to configure the client and server end-to-end without looking to external docs. Structured, with sections and steps.

The docs must be developed in the form of a tutorial.

1. how does it work;
2. structure of files and configurations;
3. how create a client certificate;
4. how to add a client certificate;
5. how to revoke a client certificate.