openssl CLI

1) Create a self-signed certificate

1. Generate a private key
   openssl genrsa -des3 -out private_key.pem 2048
2. Generate a certificate signing request for the private key
   openssl req -new -key private_key.pem -out cert.csr
3. Remove passphrase from the private key
   openssl rsa -in private_key.pem -out key.perm
4. Generate a self-signed certificate
   openssl x509 -req -days 365 -in cert.csr -signkey key.pem -out self_signed.crt

2) Check if a certificate is self-signed
openssl x509 -in cert.pem -inform PEM -noout -subject
openssl x509 -in cert.pem -inform PEM -noout -issuer
Self-signed certificate have the same subject and issuer