openssl req -new -x509 -days 7300 -key ca.key -out ca.crt