# créer un certif
openssl req -nodes -newkey rsa:8192 -sha256 -keyout server.key -out server.csr
# sha256 : SHA-256 Digest
# sha384 : SHA-384 Digest
# sha512 : SHA-512 Digest

# signer un certif
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

# lire un certif
openssl x509 -in server.crt -text -noout
(Permalink)