To generate a self-signed cert, do the following:
openssl req -config 12factor.req -new -nodes -x509 -newkey rsa:2048 -sha256 -keyout 12factor.key -out 12factor.cert -days 3650
Where 12factor.req is:
[ req ]
default_bits = 2048
default_keyfile = 12factor.key