openssl req
-x509
-nodes
-sha256
-days
7300
-newkey
rsa:
4096
-keyout
caKey.pem
-out
caCert.pem