$ openssl genrsa -out <private-key> <bit-length>

$ openssl genrsa -out <private-key> -des3 <bit-length>

$ openssl rsa -in <private-key> -pubout -out <public-key>

$ openssl req -new -key <private-key> -out <server-csr>

$ openssl x509 -req -in <server-csr> -signkey <private-key> -out <server-crt>

$ openssl s_client -connect www.example.com:443

$ openssl s_client -connect www.example.com:443 -showcerts < /dev/null

$ openssl s_server -cert <server-crt> -key <private-key>