Instructions from https://langui.sh/2009/01/18/openssl-self-signed-ca/