initial

ca/README.md

@@ -0,0 +1,15 @@
+## CSR > pkcs12 certificate
+
+
+1. Generate CSR and private key
+`openssl req -nodes -new -newkey rsa:2048 -sha256 -out csr.pem`
+Results in: csr.pem, privkey.pem
+
+2. Submit `csr.pem` to CA and obtain `cert.pem`
+
+3. Bundle cert.pem and privkey.pem into pkcs12
+```
+openssl pkcs12 -export -out certificate.pfx \
+-inkey privkey.pem \
+-in cert.pem
+```