# private keys
openssl genrsa -out MojeCA.key -des3 1024
openssl genrsa -out TrustedClient.key -des3 1024
#certificate requests
openssl req -outform PEM -out MojeCA.csr -new -key MojeCA.key -days 365
openssl req -outform PEM -out TrustedClient.csr -new -key TrustedClient.key -days 365
#certificates
openssl x509 -req -inform PEM -in MojeCA.csr -outform PEM -out MojeCA.crt -signkey MojeCA.key -keyform PEM \
      -CAcreateserial -CAserial MojeCA.srl -set_serial 12 
echo "01" > MojeCA.srl
openssl x509 -req -inform PEM -in TrustedClient.csr -outform PEM -out TrustedClient.crt -CA MojeCA.crt -CAkey MojeCA.key
 #p12
openssl pkcs12 -export -out TrustedClient.p12  -in TrustedClient.crt -inkey TrustedClient.key -name TrustedClient
#PEM
openssl pkcs12 -in TrustedClient.p12 -out TrustedClient.pem