## on the server
```bash 
sudo openssl genrsa -des3 -out server.key 2048
```

```bash 
openssl req -new -key server.key -out server.csr
```

Country Name (2 letter code) [AU]:US  
State or Province Name (full name) [Some-State]:Wisconsin  
Locality Name (eg, city) []:Milwaukee  
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Sockcess Customs  
Organizational Unit Name (eg, section) []:Web  
Common Name (e.g. server FQDN or YOUR name) []:sockcesscustoms.com  
Email Address []:info@sockcesscustoms.com  

The fields email address, optional company name and challenge password can be left blank for a webserver certificate.

### remove the password  
```bash 
sudo cp server.key server.key.org
```
```bash 
sudo openssl rsa -in server.key.org -out server.key
```