My self-signed certificate for this blog just expired and I just created a new one. I remember having to type in multiple commands before to create one, but I found this command in one of my notes in Evernote (don’t remember where I got it from) which lets you create a self-signed certificate by just typing in one command line:

sudo openssl req -x509 -nodes -days 1825 -newkey rsa:2048 -keyout /etc/apache2/ssl/apache.key -out /etc/apache2/ssl/apache.crt

The above command will create a self-signed certificate valid for 5 years (1825 days) using a 2048-bit RSA encryption. The certificate will work with the apache web server.