openssl genrsa -out ./cakey.pem
openssl req -new -x509 -config ./usr/share/ssl/openssl.cnf -key ./cakey.pem -out ./cacert.pem
openssl req -in certreq.txt -text
openssl ca -config ./openssl.cnf -out ./abc.cer -infiles ./certreq.txt
openssl x509 -in ./abc.cer -out ./xyz.cer
