1.  Make a conf file
2.  Generate a certificate request
    openssl req -new -out <hostname>.csr -newkey rsa:4096 -nodes -sha512 -keyout privkey.pem -config <hostname>.conf
3.  Sign cert
    openssl ca -out cert.pem -infiles <hostname>.csr