You know what to do:Generate a Certificate Signing Request and a key Send the CSR to your Certificate Authority for signingWait for the signed Certificate to come back from the CAPut the key and the Certificate where your web, email, or other server can find them I always have to look up the right openssl(1) command line arguments.This year, I decided to make a script.