Creates a 2048-bit RSA key and a self-signed certificate valid for a year, with the subject alternative names that modern browsers require. The -nodes flag keeps the key unencrypted so servers can load it without a passphrase. Browsers still warn because no trusted CA signed it.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.