sudo openssl genrsa -out /etc/ssl/private/selfsign.key 2048 && sudo openssl req -new -x509 -key /etc/ssl/private/selfsign.key -out /etc/ssl/certs/selfsign.crt -sha256