OpenSSL SSL certificate generation process

openssl.sh

# Generate private key with passphrase
openssl genrsa -des3 -out server.key 2048

# Private key without passpharase; UNDERSTAND THE RISK!
openssl rsa -in server.key -out server.key-nopass

# Generate CSR to submit to CA
openssl req -new -sha256 -key server.key -out server.csr

# Check/view CSR
openssl req -text -noout -verify -in server.csr