openssl req -newkey rsa:4096 -sha256 -keyout priv-key.pem -out certreq.pem