Open SSL common operations Generate a new Private key and Certificate Signing Request $ openssl req -out server.csr -new -newkey rsa:2048 -nodes -keyout server.key Generate a self-signed certificate and private key $ openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout server.key -out server.crt Generate a certificate signing request for an existing private key $ openssl req -out server.csr -key server.key -new Check a certificate $ openssl x509 -in server.crt -text -noout Remove password from RSA key $ openssl rsa -in private.key -out private.nocrypt.key