# umask 077; openssl genrsa -out “${mykey}” 4096) && openssl req -new -key “${mykey}” -x509 -subj “/CN=${myfqdn}” -days 3654 -out “${mycert}”