Create Root CA (Done once) Generate Cert folder mkdir -p root-ca/{certreqs,certs,crl,newcerts,private} Create Root Key