Last update: Nov 2025.
Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!
openssl ecparam -genkey -name secp384r1 | openssl ec -aes256 -out rootCA.key