= Openssl Self Signed Certificate =

 * Nice instructions 201909 - https://deliciousbrains.com/ssl-certificate-authority-for-local-https-development/

== Example 2019, create self signed certificate with keyUsage flags ==
 
 * openssl req -out test.csr -newkey rsa:4096 -nodes -keyout test.key -config cert.cnf
 * openssl x509 -req -days 365 -in test.csr -signkey test.key -sha256 -out test.crt

 * cert.cnf
   {{{
[ req ]
default_bits       = 4096
distinguished_name = req_distinguished_name

x509_extensions = v3_req

[ req_distinguished_name ]
countryName                 = Country Name (2 letter code)
countryName_default         = NZ
stateOrProvinceName         = State or Province Name (full name)
stateOrProvinceName_default = Auckland
localityName                = Locality Name (eg, city)
localityName_default        = Auckland
organizationName            = Organization Name (eg, company)
organizationName_default    = Infra&Networks
commonName                  = Common Name (e.g. server FQDN or YOUR name)
commonName_max              = 64
commonName_default          = test.vigor,nz

[v3_req]

basicConstraints = CA:FALSE
keyUsage = keyEncipherment, digitalSignature, nonRepudiation
extendedKeyUsage = serverAuth, clientAuth

subjectAltName = @alt_names

[alt_names]
DNS.1   = test1.vigor.nz


}}}