Creating Root Certificate and Signing client cert

1.openssl genrsa -out rootCA.key 2048

2.The next step is to self-sign this certificate.

openssl req -x509 -new -nodes -key rootCA.key -days 1024 -out rootCA.pem




Create A Certificate and Sign with root Key


openssl genrsa -out device.key 2048


openssl req -new -key device.key -out device.csr


openssl x509 -req -in device.csr -CA root.pem -CAkey root.key -CAcreateserial -out device.crt -days 500


Converting to p12

openssl pkcs12 -export -clcerts -in device.crt -inkey client.key -out client.p12