openssl req -new -x509 -days 7200 -key ca.key -out ca.crt