openssl genrsa -out domain.key 2048

openssl req -utf8 -out domain.csr -key domain.key -new -sha256