docker run --rm -it -w /app -v .:/app alpine/openssl genrsa -des3 -out rootCA.key 4096
docker run --rm -it -w /app -v .:/app alpine/openssl req -x509 -new -nodes -key rootCA.key -sha256 -days 1024 -out rootCA.crt
- save passpharse and rootCA.key & rootCA.crt in a vault
- add root certificate
rootCA.crt
in your OS (https://www.eduhk.hk/ocio/content/faq-how-add-root-certificate-mac-os-x)