create: openssl req -newkey rsa:2048 -nodes -keyout cert.key -x509 -days 365 -out cert.pem review: openssl x509 -text -noout -in cert.pem