I now organized the ca
folder as follows:
ca
+- certs # Here, the created certificates are stored
+- private # Permissions locked down to 0700
| +- ca.key
+- ca.cert
+- index.txt
+- serial
+- openssl.config
I am looking forward to other ideas, anyway.