openssl req -new -x509 -keyout ca.key -out ca.crt -days 3650 -newkey rsa:4096