1. generate certificate request
   

mkdir -p /root/ssl
cd /root/ssl
openssl req -new -newkey rsa:4096 -nodes -keyout mail.nindl.net.key -out mail.nindl.net.csr