This is a Test Ceritificate Authority, only to be used for testing.

#Root private key
openssl genrsa -out ca.key 2048

#Root certificate
openssl req -new -x509 -key ca.key -out ca.crt -days 10000 -batch

#Mid CSR and key
openssl req -new -out mid.csr -config mid.conf

#Sign mid.crt
openssl x509 -req -in mid.csr -extfile mid.ext -CA ca.crt -CAkey ca.key -CAcreateserial -out mid.crt -days 10000

#My CSR and key
openssl req -new -out my.csr -config my.conf
# View it with: openssl req -in my.csr -noout -text

#Sign my.crt
openssl x509 -req -in my.csr -CA mid.crt -CAkey mid.key -CAcreateserial -out my.crt -days 10000