openssl req -config openssl.cnf -new -nodes -newkey rsa:4096 -keyout private/gso-foo.key -out gso-foo.csr -days $((365*3))