# Generation of a Self Signed Certificate

**URL:** <http://fluxxset.com/t/generation-of-a-self-signed-certificate/933>\
**Category:** sys admin\
**Tags:** ssl\
**Created:** [May 14, 2025, 3:14pm UTC](http://fluxxset.com/t/generation-of-a-self-signed-certificate/933 "2025-05-14T15:14:14Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![fluxxset](http://fluxxset.com/user_avatar/fluxxset.com/fluxxset/32/20_2.png) [@fluxxset](http://fluxxset.com/u/fluxxset)\
**Post date:** [May 14, 2025, 3:14pm UTC](http://fluxxset.com/t/generation-of-a-self-signed-certificate/933/1 "2025-05-14T15:14:14Z")

</div>

Generation of a self-signed SSL certificate involves a simple 3-step procedure:

**STEP 1** : Create the server private key

```auto
openssl genrsa -out cert.key 2048

```

**STEP 2** : Create the certificate signing request (CSR)

```auto
openssl req -new -key cert.key -out cert.csr

```

**STEP 3** : Sign the certificate using the private key and CSR

```auto
openssl x509 -req -days 3650 -in cert.csr -signkey cert.key -out cert.crt

```

Congratulations! You now have a self-signed SSL certificate valid for 10 years.