how to generate the certificate using openssl