manage-ssl-openssl.sh

#  Use openSSl to create and managed SSL certificates

#  Create privat key (4096 bit):
openssl genrsa -out domain.gl.key 4096

#  Create CSR (Certificate Signing Request):
openssl req -new -sha256 -key domain.gl.key -out domain.gl.csr

#  Verify CSR:
openssl req -text -noout -verify -in domain.gl.csr

#  Verify Certificate
openssl x509 -in aaa_cert.pem -noout -text

# Convert PEM certificate file and privat key to PKCS#12 (.pfx .p12)
openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt -certfile CACert.crt

typo