# generate private key
openssl genpkey -algorithm RSA -out private.key -pkeyopt rsa_keygen_bits:2048

# generate cert sign request
openssl req -new -key private.key -out csr.csr -subj "/C=EN/ST=Anywhere/L=Where/O=Organization/OU=localenv/CN=localenv.io"

# generate self signed certificate
openssl x509 -req -days 3650 -in csr.csr -signkey private.key -out certificate.crt

# if you need to import certificate into your browser
# openssl pkcs12 -export -in certificate.crt -inkey private.key -out server.p12