create a private RSA key:
 openssl genrsa -out plain-rsa.pem 2048

create a certificate:
 openssl req -new -key privkey.pem -out cert.csr

sign ourselves that certificate:
 openssl req -new -x509 -key privkey.pem -out plain-cert.pem -days 1095

