Create new x509 certificate: openssl req -x509 -newkey

From wikieduonline
Jump to navigation Jump to search

Interactive creation[edit]

openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -sha256 -days 365

Non-interactive creation and 10 years expiration[edit]

openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -sha256 -days 3650 -nodes -subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=CommonNameOrHostname"

Generating a 4096 bit RSA private key
.............................................................................++++
...........................................................................................................................++++
writing new private key to 'key.pem'


file cert.pem
cert.pem: PEM certificate

file key.pem
key.pem:  ASCII text

Related[edit]

See also[edit]

Advertising: