openssl x509 -text -noout -in $certfile

openssl req -text -noout -in $csrfile

openssl req -x509 -nodes -days 365 -subj '/C=AT/ST=/L=/O=/OU=/CN=' -sha256 -newkey rsa:2048 -keyout $keyfile -out $certfile

openssl pkcs12 -export -in $certfile -inkey $keyfile -out $p12file

openssl pkcs12 -export -in $certfile -inkey $keyfile -certfile $cacertchain -out $p12file

openssl pkcs12 -in $p12file -out $certfile -clcerts -nokeys
openssl pkcs12 -in $p12file -out $keyfile -nocerts

openssl rsa -in $keyfile -out $keyfile2