openssl genrsa 4096 > domain.key
openssl req -new -sha256 -key domain.key