req
:
openssl req -x509 -subj /CN=root.yourdomain.com -days 3650 -noenc \
-out root.crt -keyout root.key
# -x509 - generate a certificate
# -subj - subject
# -days - validity period
The rules can be stated as followed:
Passes all tests
Maximizes clarity