openssl req -newkey rsa:2048 -sha256 -keyout priv-key.pem -out certreq.pem