openssl genrsa -des3 -out tender.mrt.ru.key 2048
openssl req -new -key tender.mrt.ru.key -out tender.mrt.ru.csr

cp tender.mrt.ru.key tender.mrt.ru.key.orig
openssl rsa -in tender.mrt.ru.key.orig -out tender.mrt.ru.key

openssl x509 -req -days 365 -in tender.mrt.ru.csr -signkey tender.mrt.ru.key -out tender.mrt.ru.crt