openssl genrsa 2024 > ssl.key
openssl req -new -key ssl.key > ssl.csr
openssl x509 -req -days 3650 -signkey ssl.key < ssl.csr > ssl.crt

http://www.bunkei-programmer.net/entry/2014/06/24/232915