Certificate generation with OpenSSL # Here you will see few tips about how certificates can be generated using openssl CLI tool. This is more like a collection of tips, and it doesn’t pretend to be exhaustive. In production settings, make sure at least that: your private keys are kept safe; certificate extensions are properly configured; apps that use these certificates are properly configured. A lot of things require attention in order to work as expected and remain secure.