Run the following command:

$ openssl req -new -newkey <encryption algorithm>:<number of bits> -<digest> -keyout <key file> -out <CSR file>

For example, the following command uses 2048 bit RSA encryption and SHA1 digest to create a key file named keystore.key and a CSR file named keystore.csr:

$ openssl req -new -newkey rsa:2048 -sha1 -keyout keystore.key -out keystore.csr

The following image shows the requested information:

Run the following command:

$ openssl x509 -req -days <number of days> -in <CSR file> -signkey <key file> -out <CRT file>

The command creates a self-signed certificate. Use a certificate from a certificate authority for a higher level of security.

For example, the following command uses a CSR file named keystore.csr and a key file named keystore.key to create a self-signed certificate named keystore.crt that is valid for 11499 days:

$ openssl x509 -req -days 11499 -in keystore.csr -signkey keystore.key -out keystore.crt