Introduction here: http://www.recompile.se/mandos/man/intro.8mandos
Disclosure: I am a co-author. (Yeah, yeah, we will switch our certificate from CACert to LetsEncrypt. Soon. Ish.)