How to get an SSL certificate

Self-signed

How to generate a self-signed SSL certificate

openssl req -x509 -nodes -days 3650 -newkey rsa:4096 \
            -out $SITE.crt -keyout $SITE.key

Link to original

From a real registrar

How to get an SSL certificate from a real registrar

Now that Let’s Encrypt exists, the below information is a lot less useful…

Generate a unique site key:

openssl genrsa -out $SITE.key 4096

Generate a certificate signing request:

openssl req -new -config $SITE.cnf \
            -key $SITE.key -out $SITE.csr

Link to original