Generate a self-signed SSL certificate

openssl req -x509 -nodes -newkey rsa:2048 -sha256 -days 365 
  -keyout /etc/ssl/private/self.key 
  -out /etc/ssl/certs/self.crt 
  -subj '/CN=catalogue.example.com'