openssl
	req  					= X509 signing request CSR
    -x509 					= output a x509 structure instead of a cert. req.
	-newkey	rsa:1024 		= -newkey rsa:bits generate a new RSA key of 'bits' in size
	-subj "/CN=$HOSTNAME"	= set or modify request subject
	-days 365				= number of days a certificate generated by -x509 is valid for.
	-nodes					= don't encrypt the output key
	-keyout "$CERTIFICATE"  = file to send the key to
	-out "$CERTIFICATE"     = output file