OpenSSL generate root and intermediate CA (simple)

gen.sh

#!/bin/bash

# Root CA
echo 'Generating Root CA'
openssl ecparam -name secp384r1 -genkey -noout -out ca.key.pem
openssl req -x509 -new -nodes -key ca.key.pem -sha512 -days 3650 -out ca.crt.pem
openssl pkcs12 -inkey ca.key.pem -in ca.crt.pem -export -out ca.pfx

# Intermediate CA
echo 'Generating Intermediate CA'
openssl ecparam -name secp384r1 -genkey -noout -out int.key.pem
openssl req -new -key int.key.pem -out int.csr.pem
openssl x509 -req -days 360 -in int.csr.pem -CA ca.crt.pem -CAkey ca.key.pem -CAcreateserial -out int.crt.pem -sha512
openssl pkcs12 -inkey int.key.pem -in int.crt.pem -export -out int.pfx