Table of Contents
See https://www.sslshopper.com/article-most-common-openssl-commands.html for a great overview of frequent commands.
Create self signed cert
This creates an sha2 hash (sha1 is deprecated),
nodes does not add password, 4096 bits should be good for the lifetime of the cert.
# openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 10000 -nodes -sha256