openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes -subj '/CN=yourdomain'
substitute *yourdomain* by your domain. Stolen from [1].
[1]
.:home:.