Your very own CA

Generate your CA:

certified-ca C="US" ST="CA" L="San Francisco" O="Example" CN="Example CA"

This generates both a root and an intermediate CA. The intermediate CA doesn't have a password on its private key and is intended to be used to automatically generate and sign further certificates.

The root CA's private key should be stored offline and only recalled in the event the intermediate CA's private key is compromised. Once you've stored db/private/root-ca.key offline, feel free to remove it.

---

Next: Trust your CA