openssl x509 -req -days 3650 -in request.csr -sigopt rsa:2048 -signkey privkey.pem -out fullchain.pem