-- Generate CA key & certificate openssl req -x509 -newkey rsa:4096 -nodes -keyout MyRootCA.key -sha256 -days 1024 -out MyRootCA.pem -subj "/C=CZ/ST=CZ/L=Prague/O=Firma/OU=IT/CN=testdomain.cesal.cz" -- Generate client key & certificate openssl req -new -newkey rsa:4096 -nodes -sha256 -subj "/C=CZ/ST=CZ/L=Prague/O=Firma/OU=IT/CN=testdomain.cesal.cz" -keyout MyClient1.key -out MyClient1.csr openssl x509 -req -in MyClient1.csr -CA MyRootCA.pem -CAkey MyRootCA.key -CAcreateserial -out MyClient1.pem -days 1024 -sha256 openssl verify -CAfile MyRootCA.pem MyClient1.pem openssl x509 -text -in MyRootCA.pem
