$ openssl req -new -x509 -days 365 -out server.crt -keyout server.key
$ openssl req -new -out server.csr -keyout server.key
Create the certificate as above, then:
$ mv server.key server.key.encrypted
$ openssl rsa -in server.key.encrypted -out server.key
$ openssl x509 -noout -text -in <name>.crt
$ openssl rsa -noout -text -in <name>.key
© Ian Langworth