CA Key erstellen:
openssl genrsa -aes256 -out ca-key.pem 4096
CA erstellen:
openssl req -x509 -new -nodes -extensions v3_ca -key ca-key.pem -days 3650 -out ca-root.pem -sha512 -subj '/C=DE/ST=Hessen/L=Heusenstamm/O=OnkelDom/OU=Ops/CN=onkeldom.lan/[email protected]'